tree 62ac2c5496101a1a795185a727327ea31c3e6ac5
parent a2d81f1a27e82fb36899c4644a370759e3759b0c
author David Benjamin <davidben@google.com> 1468019221 -0700
committer David Benjamin <davidben@google.com> 1468347842 +0000

Don't fall back to SHA-1 in TLS 1.3, only TLS 1.2.

TLS 1.3 also forbids signing SHA-1 digests, but this will be done as a
consequence of forbidding PKCS#1 in 1.3 altogether (rsa_sign_sha1) and
requiring a curve match in ECDSA (ecdsa_sha1).

Change-Id: I665971139ccef9e270fd5796c5e6a814a8f663b1
Reviewed-on: https://boringssl-review.googlesource.com/8696
Reviewed-by: David Benjamin <davidben@google.com>