Function supportedSignatureAlgorithms

common.go:1724–1738

supportedSignatureAlgorithms returns the supported signature algorithms for the given minimum TLS version, to advertise in ClientHello and CertificateRequest messages.

(minVers uint16)

// the given minimum TLS version, to advertise in ClientHello and
// CertificateRequest messages.
func supportedSignatureAlgorithms(minVers uint16) []SignatureScheme {
	sigAlgs := defaultSupportedSignatureAlgorithms()
	if fips140tls.Required() {
		sigAlgs = slices.DeleteFunc(sigAlgs, func(s SignatureScheme) bool {
			return !slices.Contains(allowedSignatureAlgorithmsFIPS, s)
		})
	}
	if minVers > VersionTLS12 {
		sigAlgs = slices.DeleteFunc(sigAlgs, func(s SignatureScheme) bool {
			sigType, sigHash, _ := typeAndHashFromSignatureScheme(s)
			return sigType == signaturePKCS1v15 || sigHash == crypto.SHA1
		})
	}
	return sigAlgs
}

// supportedSignatureAlgorithmsCert returns the supported algorithms for
// signatures in certificates.