Function defaultSupportedSignatureAlgorithmsCert

defaults.go:56–71

defaultSupportedSignatureAlgorithmsCert returns the signature algorithms that the code advertises as supported for signatures in certificates. We include all algorithms, including SHA-1 and PKCS#1 v1.5, because it's more likely that something on our side will be willing to accept a *-with-SHA1 cert

()

// choosing not to send it. crypto/x509 will refuse to verify important SHA-1
// signatures anyway.
func defaultSupportedSignatureAlgorithmsCert() []SignatureScheme {
	return []SignatureScheme{
		PSSWithSHA256,
		ECDSAWithP256AndSHA256,
		Ed25519,
		PSSWithSHA384,
		PSSWithSHA512,
		PKCS1WithSHA256,
		PKCS1WithSHA384,
		PKCS1WithSHA512,
		ECDSAWithP384AndSHA384,
		ECDSAWithP521AndSHA512,
		PKCS1WithSHA1,
		ECDSAWithSHA1,
	}
}

//var tlsrsakex = godebug.New("tlsrsakex")
//var tls3des = godebug.New("tls3des")