Add SHA-512 to BSI TLS policy's allowed sigatures hashes

randombit · Nov 14, 2019 · 070d1cf · 070d1cf
1 parent 9b01dec
commit 070d1cf
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/src/lib/tls/tls_policy.h b/src/lib/tls/tls_policy.h
@@ -425,7 +425,7 @@ class BOTAN_PUBLIC_API(2,0) BSI_TR_02102_2 : public Policy
 
       std::vector<std::string> allowed_signature_hashes() const override
          {
-         return std::vector<std::string>({"SHA-384", "SHA-256"});
+         return std::vector<std::string>({"SHA-512", "SHA-384", "SHA-256"});
          }
 
       std::vector<std::string> allowed_macs() const override

diff --git a/src/tests/data/tls-policy/bsi.txt b/src/tests/data/tls-policy/bsi.txt
@@ -5,7 +5,7 @@ allow_dtls10 = false
 allow_dtls12 = false
 
 ciphers = AES-256/GCM AES-128/GCM AES-256 AES-128 AES-256/CCM AES-128/CCM
-signature_hashes = SHA-384 SHA-256
+signature_hashes = SHA-512 SHA-384 SHA-256
 macs = AEAD SHA-384 SHA-256
 key_exchange_methods = ECDH DH PSK ECDHE_PSK DHE_PSK
 signature_methods = ECDSA RSA DSA