Strangely you can negotiate using only MD5 in TLS 1.2. Just ignore it

entirely if we see it.

1 files changed, 2 insertions, 5 deletions

diff --git a/src/tls/tls_extensions.cpp b/src/tls/tls_extensions.cpp
index 4fbcdbad1..ecb01481a 100644
--- a/src/tls/tls_extensions.cpp
+++ b/src/tls/tls_extensions.cpp
@@ -280,8 +280,8 @@ std::string Signature_Algorithms::hash_algo_name(byte code)
    {
    switch(code)
       {
-      case 1:
-         return "MD5";
+      // code 1 is MD5 - ignore it
+
       case 2:
          return "SHA-1";
       case 3:
@@ -299,9 +299,6 @@ std::string Signature_Algorithms::hash_algo_name(byte code)
 
 byte Signature_Algorithms::hash_algo_code(const std::string& name)
    {
-   if(name == "MD5")
-      return 1;
-
    if(name == "SHA-1")
       return 2;