From 43b59d13239e0d9593649b77bdea3651150f6132 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Tue, 19 Sep 2017 11:10:09 +0200 Subject: ikev2: Don't use SHA-1 for RFC 7427 signature authentication RFC 8247 demoted it to MUST NOT. References #2427. --- src/libcharon/sa/ikev2/authenticators/pubkey_authenticator.c | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) (limited to 'src/libcharon/sa') diff --git a/src/libcharon/sa/ikev2/authenticators/pubkey_authenticator.c b/src/libcharon/sa/ikev2/authenticators/pubkey_authenticator.c index 19ea72d0b..b2b1ef289 100644 --- a/src/libcharon/sa/ikev2/authenticators/pubkey_authenticator.c +++ b/src/libcharon/sa/ikev2/authenticators/pubkey_authenticator.c @@ -156,14 +156,12 @@ static array_t *select_signature_schemes(keymat_v2_t *keymat, } enumerator->destroy(enumerator); - /* for RSA we tried at least SHA-512, also try other schemes down to - * what we'd use with classic authentication */ + /* for RSA we tried at least SHA-512, also try other schemes */ if (key_type == KEY_RSA) { signature_scheme_t schemes[] = { SIGN_RSA_EMSA_PKCS1_SHA2_384, SIGN_RSA_EMSA_PKCS1_SHA2_256, - SIGN_RSA_EMSA_PKCS1_SHA1, }, contained; bool found; int i, j; -- cgit v1.2.3