Disable SHA-2 ciphersuites in < TLS 1.2 connections.
authorBodo Möller <bodo@openssl.org>
Tue, 17 Apr 2012 15:23:03 +0000 (15:23 +0000)
committerBodo Möller <bodo@openssl.org>
Tue, 17 Apr 2012 15:23:03 +0000 (15:23 +0000)
commitd3ddf0228e1977e5328277d751774bc9f9d385d8
treee2c409f7e8a2da9248c3b9b1195f6ffcfc1f5a9e
parent800e1cd969f5c89f142857f63416b44ab063fb1b
Disable SHA-2 ciphersuites in < TLS 1.2 connections.

(TLS 1.2 clients could end up negotiating these with an OpenSSL server
with TLS 1.2 disabled, which is problematic.)

Submitted by: Adam Langley
CHANGES
ssl/s3_lib.c