|
 |
17c662 |
diff --git a/lib/gnutls_priority.c b/lib/gnutls_priority.c
|
|
|
17c662 |
index f3e19105f..ff13d3720 100644
|
|
|
17c662 |
--- a/lib/gnutls_priority.c
|
|
|
17c662 |
+++ b/lib/gnutls_priority.c
|
|
|
17c662 |
@@ -492,6 +492,7 @@ static const int sign_priority_secure192[] = {
|
|
|
17c662 |
static const int mac_priority_normal_default[] = {
|
|
|
17c662 |
GNUTLS_MAC_SHA1,
|
|
|
17c662 |
GNUTLS_MAC_AEAD,
|
|
|
17c662 |
+ GNUTLS_MAC_SHA256,
|
|
|
17c662 |
GNUTLS_MAC_MD5,
|
|
|
17c662 |
0
|
|
|
17c662 |
};
|
|
|
17c662 |
@@ -499,6 +500,7 @@ static const int mac_priority_normal_default[] = {
|
|
|
17c662 |
static const int mac_priority_normal_fips[] = {
|
|
|
17c662 |
GNUTLS_MAC_SHA1,
|
|
|
17c662 |
GNUTLS_MAC_AEAD,
|
|
|
17c662 |
+ GNUTLS_MAC_SHA256,
|
|
|
17c662 |
0
|
|
|
17c662 |
};
|
|
|
17c662 |
|
|
|
17c662 |
@@ -527,11 +529,13 @@ static const int mac_priority_suiteb192[] = {
|
|
|
17c662 |
static const int mac_priority_secure128[] = {
|
|
|
17c662 |
GNUTLS_MAC_SHA1,
|
|
|
17c662 |
GNUTLS_MAC_AEAD,
|
|
|
17c662 |
+ GNUTLS_MAC_SHA256,
|
|
|
17c662 |
0
|
|
|
17c662 |
};
|
|
|
17c662 |
|
|
|
17c662 |
static const int mac_priority_secure192[] = {
|
|
|
17c662 |
GNUTLS_MAC_AEAD,
|
|
|
17c662 |
+ GNUTLS_MAC_SHA256,
|
|
|
17c662 |
0
|
|
|
17c662 |
};
|
|
|
17c662 |
|
|
|
17c662 |
diff --git a/tests/priorities.c b/tests/priorities.c
|
|
|
17c662 |
index 46221fcc0..0593279de 100644
|
|
|
17c662 |
--- a/tests/priorities.c
|
|
|
17c662 |
+++ b/tests/priorities.c
|
|
|
17c662 |
@@ -100,18 +100,18 @@ try_prio(const char *prio, unsigned expected_cs, unsigned expected_ciphers)
|
|
|
17c662 |
|
|
|
17c662 |
void doit(void)
|
|
|
17c662 |
{
|
|
|
17c662 |
- const int normal = 41;
|
|
|
17c662 |
- const int null = 4;
|
|
|
17c662 |
- const int sec128 = 36;
|
|
|
17c662 |
+ const int normal = 57;
|
|
|
17c662 |
+ const int null = 5;
|
|
|
17c662 |
+ const int sec128 = 52;
|
|
|
17c662 |
|
|
|
17c662 |
try_prio("NORMAL", normal, 9);
|
|
|
17c662 |
try_prio("NORMAL:-MAC-ALL:+MD5:+MAC-ALL", normal, 9);
|
|
|
17c662 |
try_prio("NORMAL:+CIPHER-ALL", normal, 9); /* all (except null) */
|
|
|
17c662 |
try_prio("NORMAL:-CIPHER-ALL:+NULL", null, 1); /* null */
|
|
|
17c662 |
try_prio("NORMAL:-CIPHER-ALL:+NULL:+CIPHER-ALL", normal + null, 10); /* should be null + all */
|
|
|
17c662 |
- try_prio("NORMAL:-CIPHER-ALL:+NULL:+CIPHER-ALL:-CIPHER-ALL:+AES-128-CBC", 5, 1);
|
|
|
17c662 |
+ try_prio("NORMAL:-CIPHER-ALL:+NULL:+CIPHER-ALL:-CIPHER-ALL:+AES-128-CBC", 10, 1);
|
|
|
17c662 |
try_prio("PERFORMANCE", normal, 9);
|
|
|
17c662 |
- try_prio("SECURE256", 10, 4);
|
|
|
17c662 |
+ try_prio("SECURE256", 16, 4);
|
|
|
17c662 |
try_prio("SECURE128", sec128, 8);
|
|
|
17c662 |
try_prio("SECURE128:+SECURE256", sec128, 8); /* should be the same as SECURE128 */
|
|
|
17c662 |
try_prio("SECURE128:+SECURE256:+NORMAL", normal, 9); /* should be the same as NORMAL */
|