From 7bb6053c8c707bdab21a4d5d79e383b935f8bea0 Mon Sep 17 00:00:00 2001 From: Jack Lloyd Date: Sat, 9 Nov 2019 14:18:46 -0500 Subject: Allow disabling TLS 1.0/1.1 and DTLS 1.0 at build time --- src/build-data/policy/bsi.txt | 7 ++++--- src/build-data/policy/nist.txt | 11 +++++------ 2 files changed, 9 insertions(+), 9 deletions(-) (limited to 'src/build-data/policy') diff --git a/src/build-data/policy/bsi.txt b/src/build-data/policy/bsi.txt index a3e324268..d5d73a761 100644 --- a/src/build-data/policy/bsi.txt +++ b/src/build-data/policy/bsi.txt @@ -160,10 +160,7 @@ blake2 comb4p gost_3411 md4 -#md5 // needed for tls rmd160 -#sha1 // needed for tls -#sha1_sse2 // needed for tls shake skein sm3 @@ -184,4 +181,8 @@ x919_mac # misc bcrypt +# tls +tls_10 +tls_cbc + diff --git a/src/build-data/policy/nist.txt b/src/build-data/policy/nist.txt index 7eb0be23b..d00c601b9 100644 --- a/src/build-data/policy/nist.txt +++ b/src/build-data/policy/nist.txt @@ -53,9 +53,6 @@ aes_armv8 aes_power8 # hash -sha1_sse2 -sha1_x86 -sha1_armv8 sha2_32_x86 sha2_32_armv8 sha2_32_bmi2 @@ -164,10 +161,7 @@ blake2 comb4p gost_3411 md4 -#md5 // needed for tls rmd160 -#sha1 // needed for tls -#sha1_sse2 // needed for tls skein sm3 streebog @@ -185,4 +179,9 @@ x919_mac # misc bcrypt + +# tls +tls_10 +tls_cbc + -- cgit v1.2.3