git.iko.soy/typeable/wai
on master help sign in
removing SHA 512 and SHA 384 from supportedCiphers to rescue Safari and golang. (#429)
commit172665439cf377370ae0fe9465301015b25e908d authorKazu Yamamoto <kazu@iij.ad.jp> dateThu 10 Sep 2015, 09:31 (11 years ago) parent8ad19ce
1 file changed+3−3
compare with master
unifiedsplit
warp-tls/Network/Wai/Handler/WarpTLS.hs+3−3
warp-tls/Network/Wai/Handler/WarpTLS.hs+3−3
@@ -268,9 +268,9 @@ runTLSSocket' tlsset@TLSSettings{..} set credential sock app =
268268 , TLS.supportedCiphers = tlsCiphers
269269 , TLS.supportedCompressions = [TLS.nullCompression]
270270 , TLS.supportedHashSignatures = [
271− (TLS.HashSHA512, TLS.SignatureRSA)
272− , (TLS.HashSHA384, TLS.SignatureRSA)
273− , (TLS.HashSHA256, TLS.SignatureRSA)
271+ -- Safari 8 and go tls have bugs on SHA 512 and SHA 384.
272+ -- So, we don't specify them here at this moment.
273+ (TLS.HashSHA256, TLS.SignatureRSA)
274274 , (TLS.HashSHA224, TLS.SignatureRSA)
275275 , (TLS.HashSHA1, TLS.SignatureRSA)
276276 , (TLS.HashSHA1, TLS.SignatureDSS)