aboutsummaryrefslogtreecommitdiffstats
path: root/src/build-data/policy
diff options
context:
space:
mode:
authorJack Lloyd <[email protected]>2019-11-09 14:18:46 -0500
committerJack Lloyd <[email protected]>2019-11-10 11:49:05 -0500
commit7bb6053c8c707bdab21a4d5d79e383b935f8bea0 (patch)
tree14684cf4cdc81396c98ccedddfbd04b94f3a4dbe /src/build-data/policy
parente9c552d99d1fcf43b624ab436da1bfc6e00e8543 (diff)
Allow disabling TLS 1.0/1.1 and DTLS 1.0 at build time
Diffstat (limited to 'src/build-data/policy')
-rw-r--r--src/build-data/policy/bsi.txt7
-rw-r--r--src/build-data/policy/nist.txt11
2 files changed, 9 insertions, 9 deletions
diff --git a/src/build-data/policy/bsi.txt b/src/build-data/policy/bsi.txt
index a3e324268..d5d73a761 100644
--- a/src/build-data/policy/bsi.txt
+++ b/src/build-data/policy/bsi.txt
@@ -160,10 +160,7 @@ blake2
comb4p
gost_3411
md4
-#md5 // needed for tls
rmd160
-#sha1 // needed for tls
-#sha1_sse2 // needed for tls
shake
skein
sm3
@@ -184,4 +181,8 @@ x919_mac
# misc
bcrypt
+# tls
+tls_10
+tls_cbc
+
</prohibited>
diff --git a/src/build-data/policy/nist.txt b/src/build-data/policy/nist.txt
index 7eb0be23b..d00c601b9 100644
--- a/src/build-data/policy/nist.txt
+++ b/src/build-data/policy/nist.txt
@@ -53,9 +53,6 @@ aes_armv8
aes_power8
# hash
-sha1_sse2
-sha1_x86
-sha1_armv8
sha2_32_x86
sha2_32_armv8
sha2_32_bmi2
@@ -164,10 +161,7 @@ blake2
comb4p
gost_3411
md4
-#md5 // needed for tls
rmd160
-#sha1 // needed for tls
-#sha1_sse2 // needed for tls
skein
sm3
streebog
@@ -185,4 +179,9 @@ x919_mac
# misc
bcrypt
+
+# tls
+tls_10
+tls_cbc
+
</prohibited>