For improved compatibility with 'strange' certificates, add some

digest aliases (as found in OpenSSL_add_all_digests).

diff --git a/ssl/ssl_algs.c b/ssl/ssl_algs.c
index a91ee6d22e4581c429a47c8e1a447d730a806727..dde8918fe0e3d992a13a7dc9210beafe18a5baab 100644 (file)
--- a/ssl/ssl_algs.c
+++ b/ssl/ssl_algs.c
@@ -88,9 +88,13 @@ int SSL_library_init(void)
 #ifndef NO_SHA
        EVP_add_digest(EVP_sha1()); /* RSA with sha1 */
        EVP_add_digest_alias(SN_sha1,"ssl3-sha1");
 #ifndef NO_SHA
        EVP_add_digest(EVP_sha1()); /* RSA with sha1 */
        EVP_add_digest_alias(SN_sha1,"ssl3-sha1");

+       EVP_add_digest_alias(SN_sha1WithRSAEncryption,SN_sha1WithRSA);

 #endif
 #if !defined(NO_SHA) && !defined(NO_DSA)
        EVP_add_digest(EVP_dss1()); /* DSA with sha1 */
 #endif
 #if !defined(NO_SHA) && !defined(NO_DSA)
        EVP_add_digest(EVP_dss1()); /* DSA with sha1 */

+       EVP_add_digest_alias(SN_dsaWithSHA1,SN_dsaWithSHA1_2);
+       EVP_add_digest_alias(SN_dsaWithSHA1,"DSS1");
+       EVP_add_digest_alias(SN_dsaWithSHA1,"dss1");

 #endif
 
        /* If you want support for phased out ciphers, add the following */
 #endif
 
        /* If you want support for phased out ciphers, add the following */