diff options
| author | Michael Brown | 2020-06-17 00:17:21 +0200 |
|---|---|---|
| committer | Michael Brown | 2020-06-17 00:41:43 +0200 |
| commit | 7f2006a9ada4a326ac904a8719170227c8860e21 (patch) | |
| tree | ad33157cb44761383bc71f81f92ea05a71578439 /src/config/branding.h | |
| parent | [crypto] Ensure that test code drags in required ASN.1 object identifiers (diff) | |
| download | ipxe-7f2006a9ada4a326ac904a8719170227c8860e21.tar.gz ipxe-7f2006a9ada4a326ac904a8719170227c8860e21.tar.xz ipxe-7f2006a9ada4a326ac904a8719170227c8860e21.zip | |
[crypto] Disable MD5 as an OID-identifiable algorithm by default
Disable the use of MD5 as an OID-identifiable algorithm. Note that
the MD5 algorithm implementation will still be present in the build,
since it is used implicitly by various cryptographic components such
as HTTP digest authentication; this commit removes it only from the
list of OID-identifiable algorithms.
It would be appropriate to similarly disable the use of SHA-1 by
default, but doing so would break the use of OCSP since several OCSP
responders (including the current version of openca-ocspd) are not
capable of interpreting the hashAlgorithm field and so will fail if
the client uses any algorithm other than the configured default.
Signed-off-by: Michael Brown <mcb30@ipxe.org>
Diffstat (limited to 'src/config/branding.h')
0 files changed, 0 insertions, 0 deletions