5 Commits (39f800af50db23de7aa01ebd56c8132589ad36a8)

Author	SHA1	Message	Date
Clemens Lang	bc7dfd9722	Fix RSA PSS padding with SHA-1 disabled ... Invocations of EVP_PKEY_CTX_set_rsa_padding(RSA_PKCS1_PSS_PADDING) before setting an allowed digest with EVP_PKEY_CTX_set_signature_md() would fail with SHA-1 use in signatures disabled, because OpenSSL's internal default for the digest was SHA-1. This isn't documented in any of the manpages, hence we expect users to always call both EVP_PKEY_CTX_set_rsa_padding() and EVP_PKEY_CTX_set_signature_md(). We do not want set_rsa_padding() to fail if users set a non-SHA-1 signature algorithm after setting the padding mode, though, so change the internal default to SHA-256 if SHA-1 is disabled. Resolves: rhbz#2062640	3 years ago
Clemens Lang	ede38fcb54	Prevent use of SHA1 with ECDSA ... providers/implementations/signature/{ec,}dsa_sig.c accept a NID_undef digest, so to prevent SHA1 from working with ECDSA and DSA, we must return a negative value in securitycheck.c. Resolves: rhbz#2031742	3 years ago
Clemens Lang	53f53fedec	Allow SHA1 usage in MGF1 for RSASSA-PSS signatures ... Resolves: rhbz#2031742 Signed-off-by: Clemens Lang <cllang@redhat.com>	3 years ago
Clemens Lang	5a9ab1160e	Allow SHA1 usage in HMAC in TLS ... The EVP_DigestSign API is used in TLS to compute a SHA1 HMAC, which is OK from our point of view, but was blocked so far. Modify 0049-Selectively-disallow-SHA1-signatures.patch to check the EVP_PKEY type for HMAC (and TLS1-PRF and HKDF), and allow SHA1 for these cases. Note that TLS1.1 signs a MD5-SHA1 hash with a private key, which does not work with rh-allow-sha1-signatures = no, so the minimum TLS version will be TLS 1.2. Resolves: rhbz#2031742 Signed-off-by: Clemens Lang <cllang@redhat.com>	3 years ago
Clemens Lang	78fb78d307	Disable SHA1 signature creation and verification by default ... Set rh-allow-sha1-signatures = yes to re-enable Resolves: rhbz#2031742 Signed-off-by: Clemens Lang <cllang@redhat.com>	3 years ago