Add sigalg for earlier TLS versions
authorDr. Stephen Henson <steve@openssl.org>
Mon, 13 Feb 2017 16:04:07 +0000 (16:04 +0000)
committerDr. Stephen Henson <steve@openssl.org>
Wed, 15 Feb 2017 02:23:54 +0000 (02:23 +0000)
commit0972bc5cedfb3c8dcf7eae3ab010ed3b47a6f186
tree0d1f063ffc27861d41dba59a2e4db3c43e4b48f4
parent4a419f60188405d6ecc450526b6aa926638d1db2
Add sigalg for earlier TLS versions

Update tls_choose_sigalg to choose a signature algorithm for all
versions of TLS not just 1.3.

For TLS 1.2 we choose the highest preference signature algorithm
for the chosen ciphersuite.

For TLS 1.1 and earlier the signature algorithm is determined by
the ciphersuite alone. For RSA we use a special MD5+SHA1 signature
algorithm.

Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2623)
ssl/ssl_locl.h
ssl/t1_lib.c