4f0b43
diff -r 699541a7793b lib/pk11wrap/pk11pars.c
4f0b43
--- a/lib/pk11wrap/pk11pars.c	Tue Jun 16 23:03:22 2020 +0000
4f0b43
+++ b/lib/pk11wrap/pk11pars.c	Thu Jun 25 14:33:09 2020 +0200
4f0b43
@@ -323,11 +323,11 @@
4f0b43
 static const oidValDef hashOptList[] = {
4f0b43
     /* Hashes */
4f0b43
     { CIPHER_NAME("MD2"), SEC_OID_MD2,
4f0b43
-      NSS_USE_ALG_IN_SSL_KX | NSS_USE_ALG_IN_CERT_SIGNATURE },
4f0b43
+      0 },
4f0b43
     { CIPHER_NAME("MD4"), SEC_OID_MD4,
4f0b43
-      NSS_USE_ALG_IN_SSL_KX | NSS_USE_ALG_IN_CERT_SIGNATURE },
4f0b43
+      0 },
4f0b43
     { CIPHER_NAME("MD5"), SEC_OID_MD5,
4f0b43
-      NSS_USE_ALG_IN_SSL_KX | NSS_USE_ALG_IN_CERT_SIGNATURE },
4f0b43
+      0 },
4f0b43
     { CIPHER_NAME("SHA1"), SEC_OID_SHA1,
4f0b43
       NSS_USE_ALG_IN_SSL_KX | NSS_USE_ALG_IN_CERT_SIGNATURE },
4f0b43
     { CIPHER_NAME("SHA224"), SEC_OID_SHA224,
4f0b43
diff -r 699541a7793b lib/util/secoid.c
4f0b43
--- a/lib/util/secoid.c	Tue Jun 16 23:03:22 2020 +0000
4f0b43
+++ b/lib/util/secoid.c	Thu Jun 25 14:33:09 2020 +0200
4f0b43
@@ -2042,6 +2042,19 @@
4f0b43
             int i;
4f0b43
 
4f0b43
             for (i = 1; i < SEC_OID_TOTAL; i++) {
4f0b43
+                switch (i) {
4f0b43
+                case SEC_OID_MD2:
4f0b43
+                case SEC_OID_MD4:
4f0b43
+                case SEC_OID_MD5:
4f0b43
+                case SEC_OID_PKCS1_MD2_WITH_RSA_ENCRYPTION:
4f0b43
+                case SEC_OID_PKCS1_MD4_WITH_RSA_ENCRYPTION:
4f0b43
+                case SEC_OID_PKCS1_MD5_WITH_RSA_ENCRYPTION:
4f0b43
+                case SEC_OID_PKCS5_PBE_WITH_MD2_AND_DES_CBC:
4f0b43
+                case SEC_OID_PKCS5_PBE_WITH_MD5_AND_DES_CBC:
4f0b43
+                    continue;
4f0b43
+                default:
4f0b43
+                    break;
4f0b43
+                }
4f0b43
                 if (oids[i].desc && strstr(arg, oids[i].desc)) {
4f0b43
                     xOids[i].notPolicyFlags = notEnable |
4f0b43
                                               (xOids[i].notPolicyFlags & ~(DEF_FLAGS));