diff options
author | Ingela Anderton Andin <[email protected]> | 2016-04-05 07:50:01 +0200 |
---|---|---|
committer | Ingela Anderton Andin <[email protected]> | 2016-04-06 11:38:30 +0200 |
commit | 9a834cff78e3f4e33b561304c83de717019f5a4d (patch) | |
tree | 148546f7c0feab9b082240adf781c965fd7603c2 /lib | |
parent | 923ea90fb23ff65071b688fbee09c00b47afc272 (diff) | |
download | otp-9a834cff78e3f4e33b561304c83de717019f5a4d.tar.gz otp-9a834cff78e3f4e33b561304c83de717019f5a4d.tar.bz2 otp-9a834cff78e3f4e33b561304c83de717019f5a4d.zip |
ssl: Remove default support for use of md5 in TLS 1.2 signature algorithms
Diffstat (limited to 'lib')
-rw-r--r-- | lib/ssl/doc/src/ssl.xml | 4 | ||||
-rw-r--r-- | lib/ssl/src/tls_v1.erl | 4 |
2 files changed, 2 insertions, 6 deletions
diff --git a/lib/ssl/doc/src/ssl.xml b/lib/ssl/doc/src/ssl.xml index 17842c71ad..53d534ef19 100644 --- a/lib/ssl/doc/src/ssl.xml +++ b/lib/ssl/doc/src/ssl.xml @@ -548,13 +548,11 @@ fun(srp, Username :: string(), UserState :: term()) -> {sha, ecdsa}, {sha, rsa}, {sha, dsa}, -%% MD5 -{md5, rsa} ]</code> The algorithms should be in the preferred order. Selected signature algorithm can restrict which hash functions - that may be selected. + that may be selected. Default support for {md5, rsa} removed in ssl-8.0 </p> </item> </taglist> diff --git a/lib/ssl/src/tls_v1.erl b/lib/ssl/src/tls_v1.erl index 0cf6f88782..03cef633d5 100644 --- a/lib/ssl/src/tls_v1.erl +++ b/lib/ssl/src/tls_v1.erl @@ -298,9 +298,7 @@ default_signature_algs({3, 3} = Version) -> %% SHA {sha, ecdsa}, {sha, rsa}, - {sha, dsa}, - %% MD5 - {md5, rsa}], + {sha, dsa}], signature_algs(Version, Default); default_signature_algs(_) -> undefined. |