[dev.boringcrypto] all: merge master into dev.boringcrypto

[gostls13.git] / src / crypto / tls / boring.go

diff --git a/src/crypto/tls/boring.go b/src/crypto/tls/boring.go
index 95256b19f7b9626cc44633662013e9a7b874e2af..5b5c20ce1f9611a452c7852a1336db37992562b3 100644 (file)
--- a/src/crypto/tls/boring.go
+++ b/src/crypto/tls/boring.go
@@ -125,4 +125,13 @@ func supportedSignatureAlgorithms() []SignatureScheme {
        return fipsSupportedSignatureAlgorithms
 }
 
+// supportedSignatureAlgorithmsTLS12 returns the supported signature algorithms
+// for TLS 1.2. Issue 32425.
+func supportedSignatureAlgorithmsTLS12() []SignatureScheme {
+       if !needFIPS() {
+               return defaultSupportedSignatureAlgorithmsTLS12
+       }
+       return fipsSupportedSignatureAlgorithms[3:]
+}
+
 var testingOnlyForceClientHelloSignatureAlgorithms []SignatureScheme