X-Git-Url: https://bearssl.org/gitweb//home/git/?p=BearSSL;a=blobdiff_plain;f=tools%2Fserver.c;fp=tools%2Fserver.c;h=71cfa5d39d41f624e5420a6b7f54bb4ff3018f60;hp=9424bf542033f8b8df46f9b4f1e3ecea485738ae;hb=7561e7d6c86171257a4153d95202b0791b3612a8;hpb=6cc90dad21b653914282ccc9ecfd7dfdd78f3fd5

diff --git a/tools/server.c b/tools/server.c
index 9424bf5..71cfa5d 100644
--- a/tools/server.c
+++ b/tools/server.c
@@ -333,6 +333,9 @@ sp_choose(const br_ssl_server_policy_class **pctx,
 		case BR_SSLKEYX_ECDHE_RSA:
 			if (pc->sk->key_type == BR_KEYTYPE_RSA) {
 				choices->cipher_suite = st[u][0];
+				if (cc->eng.session.version < BR_TLS12) {
+					hash_id = 0;
+				}
 				choices->hash_id = hash_id;
 				goto choose_ok;
 			}
@@ -340,6 +343,9 @@ sp_choose(const br_ssl_server_policy_class **pctx,
 		case BR_SSLKEYX_ECDHE_ECDSA:
 			if (pc->sk->key_type == BR_KEYTYPE_EC) {
 				choices->cipher_suite = st[u][0];
+				if (cc->eng.session.version < BR_TLS12) {
+					hash_id = br_sha1_ID;
+				}
 				choices->hash_id = hash_id;
 				goto choose_ok;
 			}