Check whether we have MD5-SHA1 and whether we need it
authorMatt Caswell <matt@openssl.org>
Thu, 27 Aug 2020 16:03:13 +0000 (17:03 +0100)
committerPauli <paul.dale@oracle.com>
Sat, 29 Aug 2020 07:56:37 +0000 (17:56 +1000)
commit8e32ea633f9d908a083f208c74eac9d8011046a3
treeb53236f40fc41ea4fdcac6ead8064558e7a590cd
parent7cd1420b3e53212485e5e7e53ac69929a9bc1ac3
Check whether we have MD5-SHA1 and whether we need it

If we don't have MD5-SHA1 then we must be use (D)TLSv1.2 or above. We
check that this is consistent with the way we've been configured. We also
ensure that we never attempt to negotiate <(D)TLSv1.2 if MD5-SHA1 is not
available.

Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/12733)
ssl/statem/statem_lib.c