mirror of
https://git.suyu.dev/suyu/mbedtls.git
synced 2026-03-23 14:12:57 +00:00
By default, keep allowing SHA-1 in key exchange signatures. Disabling it causes compatibility issues, especially with clients that use TLS1.2 but don't send the signature_algorithms extension. SHA-1 is forbidden in certificates by default, since it's vulnerable to offline collision-based attacks.