4 Commits

Author	SHA1	Message	Date
Dmitry Belyavskiy	fea833cb56	Strict certificates validation shouldn't allow explicit EC parameters ... Related: rhbz#2058663	2022-06-24 17:17:35 +02:00
Clemens Lang	153f593fa6	Fix SHA1 certs in LEGACY without openssl lib ctxt ... Resolves: rhbz#2065400 Signed-off-by: Clemens Lang <cllang@redhat.com>	2022-03-18 13:36:55 +01:00
Clemens Lang	4eb630f7d5	Fix TLS connections with SHA1 signatures if rh-allow-sha1-signatures = yes ... Resolves: rhbz#2065400 Signed-off-by: Clemens Lang <cllang@redhat.com>	2022-03-18 09:27:51 +01:00
Clemens Lang	3c66c99bd5	Allow SHA1 in seclevel 2 if rh-allow-sha1-signatures = yes ... We want legacy policy to be able to talk to older RHEL that only supports SHA1 signature algorithms, so allow SHA1 signatures even in seclevel 2 if rh-allow-sha1-signatures is set to yes. Resolves: rhbz#2060510 Signed-off-by: Clemens Lang <cllang@redhat.com>	2022-03-04 10:19:04 +01:00