From bc7f7090db96e35bfcf73da923be89cb0b15c0e9 Mon Sep 17 00:00:00 2001
From: beck <>
Date: Fri, 16 Nov 2018 02:41:16 +0000
Subject: Unbreak legacy ciphers for prior to 1.1 by setting having a legacy
 sigalg for MD5_SHA1 and using it as the non sigalgs default ok jsing@

---
 src/lib/libssl/ssl_sigalgs.h | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

(limited to 'src/lib/libssl/ssl_sigalgs.h')

diff --git a/src/lib/libssl/ssl_sigalgs.h b/src/lib/libssl/ssl_sigalgs.h
index 1bce6e8ee3..5ae595835b 100644
--- a/src/lib/libssl/ssl_sigalgs.h
+++ b/src/lib/libssl/ssl_sigalgs.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl_sigalgs.h,v 1.7 2018/11/11 21:54:47 beck Exp $ */
+/* $OpenBSD: ssl_sigalgs.h,v 1.8 2018/11/16 02:41:16 beck Exp $ */
 /*
  * Copyright (c) 2018, Bob Beck <beck@openbsd.org>
  *
@@ -55,6 +55,9 @@ __BEGIN_HIDDEN_DECLS
 #define SIGALG_GOSTR12_256_STREEBOG_256	0xEEEE
 #define SIGALG_GOSTR01_GOST94		0xEDED
 
+/* Legacy sigalg for < 1.2 same value as boring uses*/
+#define SIGALG_RSA_PKCS1_MD5_SHA1	0xFF01
+
 #define SIGALG_FLAG_RSA_PSS	0x00000001
 
 struct ssl_sigalg{
-- 
cgit v1.2.3-55-g6feb