denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ikev2: Don't use SHA-1 for RFC 7427 signature authentication

Browse Source 
RFC 8247 demoted it to MUST NOT.

References #2427.
This commit is contained in:
Tobias Brunner
2017-11-08 16:47:24 +01:00
parent 76c58498ef
commit 43b59d1323
3 changed files with 5 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/tests/suites/test_hasher.c
+3 -3
View File
@@ -201,9 +201,9 @@ START_TEST(test_hasher_from_integrity)
size_t length;
length = 0;
ck_assert(hasher_algorithm_from_integrity(auths[_i].auth, NULL) ==
ck_assert(hasher_algorithm_from_integrity(auths[_i].auth, NULL) ==
auths[_i].alg);
ck_assert(hasher_algorithm_from_integrity(auths[_i].auth, &length) ==
ck_assert(hasher_algorithm_from_integrity(auths[_i].auth, &length) ==
auths[_i].alg);
ck_assert(length == auths[_i].length);
}
@@ -226,7 +226,7 @@ typedef struct {
static hasher_ikev2_t ikev2[] = {
{ HASH_IDENTITY, TRUE },
{ HASH_SHA1, TRUE },
{ HASH_SHA1, FALSE },
{ HASH_SHA256, TRUE },
{ HASH_SHA384, TRUE },
{ HASH_SHA512, TRUE },