Commits on Apr 26, 2024

1. aws-lc-rs: reduce priority of ECDSA_NISTP521_SHA512 …

   In TLS1.2, this actually means ECDSA_SHA512.  If the peer selects
   that, we get caught out depending on the curve of the public key
   because we don't support (for example) `ECDSA_NISTP256_SHA512`.
   
   Reducing the preference of this improves matters, because a
   peer that respects our priority will only select that if nothing
   else is possible (which includes the cases that SHA256 and SHA384
   are not supported, in which case we are hosed, but also if the
   version is TLS1.3 and public key is on P521).

   

   ctz committed Apr 26, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for e01b7b2
   • Browse repository at this point

   Copy the full SHA

   e01b7b2 View commit details

   Browse the repository at this point in the history