yuzu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2025-03-05 03:49:48 +00:00
Code Issues Packages Projects Releases Wiki Activity
mbedtls/ChangeLog.d/remove_default_alllow_sha1.txt

11 lines
461 B
Plaintext
Raw Normal View History

Remove MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES option. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-08-27 12:34:22 +00:00
Removals
* Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
which allowed SHA-1 in the default TLS configuration for certificate
signing. It was intended to facilitate the transition in environments
with SHA-1 certificates. SHA-1 is considered a weak message digest and
its use constitutes a security risk.
Disable MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE in default config. Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>
2021-08-27 13:36:47 +00:00
Changes
* Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
disabled by default.
Reference in a new issue Copy permalink