[openssl-users] Regarding to disable some signature algorithm in client hello message

[Devang Kubavat]

Hi,

I want to disable the SHA1 hash algorithm in Extension: signature algorithm client hello message.

[cid:image003.jpg at 01D407C3.1A227530]

I have used
      /* the signature algorithms list */
      const char signAlgo[] = "RSA+SHA256";
      (void)SSL_CTX_set1_client_sigalgs_list(ctx, signAlgo);

But, still client is setting all algorithms. Is there any other way to set signature algorithm to SSL_CTX or SSL ?


Best Regards,
Devang

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20180619/64f41d01/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.jpg
Type: image/jpeg
Size: 34117 bytes
Desc: image003.jpg
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20180619/64f41d01/attachment-0001.jpg>