Ali Mohammad Pur afa98fcb55 LibTLS: Always send the signature_algorithms extension ...

At some point since Sep 2018, OpenSSL added a ~~bug~~ feature that makes
the default set of signature algorithms defined in TLSv1.2 unusable
without reducing what they call the "security level", which caused
communication with servers using more recent versions of openssl to
fail with "internal error".
This commit makes LibTLS always send its supported sigalgs, making the
server not default to the insecure defaults, and thus enabling us to
talk to such servers.

2021-05-12 08:35:02 +01:00

5.1 KiB

Raw Blame History

View Raw