From a7e4eb88f4b1fed61577a6666a649e53c78769c4 Mon Sep 17 00:00:00 2001
From: beck <>
Date: Wed, 14 Nov 2018 02:27:15 +0000
Subject: In TLS1.2 we use evp_sha1 if we fall back this far, not evp_md5_sha1
 as in 1.1 Makes connections to outlook.office365.com work

---
 src/lib/libssl/ssl_sigalgs.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'src')

diff --git a/src/lib/libssl/ssl_sigalgs.c b/src/lib/libssl/ssl_sigalgs.c
index 9f7cf29fec..835c40e74e 100644
--- a/src/lib/libssl/ssl_sigalgs.c
+++ b/src/lib/libssl/ssl_sigalgs.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl_sigalgs.c,v 1.9 2018/11/13 15:50:54 beck Exp $ */
+/* $OpenBSD: ssl_sigalgs.c,v 1.10 2018/11/14 02:27:15 beck Exp $ */
 /*
  * Copyright (c) 2018, Bob Beck <beck@openbsd.org>
  *
@@ -144,7 +144,7 @@ const struct ssl_sigalg sigalgs[] = {
 		.value = SIGALG_RSA_PKCS1_SHA1,
 		.key_type = EVP_PKEY_RSA,
 		.pkey_idx = SSL_PKEY_RSA_SIGN,
-		.md = EVP_md5_sha1,
+		.md = EVP_sha1,
 	},
 	{
 		.value = SIGALG_ECDSA_SHA1,
-- 
cgit v1.2.3-55-g6feb