Age | Commit message (Collapse) | Author |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Broken-by: 838d897c8e
|
|
This would be wanted for server OCSP stapling in a dual RSA/ECDSA certificate installation
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
configured
|
|
|
|
|
|
The new store_newblock() includes the required safety checck, plus the alocate
and data-copy operations.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
OpenBSD seems to prioritize the child of a fork; Linux & FreeBSD the parent
|
|
More recent OpenSSL versions (1.1.0) reasonably prefer ECDSA when available,
where older (1.0.2) preferred RSA
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
dkim_verify_signers. Bug 2189
|
|
|
|
This provides generic support, though is covers the need introduced
by https://datatracker.ietf.org/doc/draft-ietf-dcrup-dkim-usage/?include_text=1
(deprecating sha-1 and RSA keys shorter than 1024 bits).
|