commit 01bf8bafcd12592d609ae361cc76966933c61b92
author Ben Taylor <ben.taylor@linaro.org> Thu Jul 17 13:58:30 2025 +0100
committer Ben Taylor <ben.taylor@linaro.org> Fri Aug 01 11:45:14 2025 +0100
tree 68313b37fc3530410109cbb2833ea86aca78aa6b
parent b98aa511285486e9ad4166a6211c99aee737228e

removed mbedtls_ssl_conf_sig_hashes and temporarily re-add sig_hashes

Signed-off-by: Ben Taylor <ben.taylor@linaro.org>

include/mbedtls/ssl.h

diff --git a/include/mbedtls/ssl.h b/include/mbedtls/ssl.h
index aa850aa..de8f13b 100644
--- a/include/mbedtls/ssl.h
+++ b/include/mbedtls/ssl.h
@@ -1486,6 +1486,9 @@
 
 #if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
 
+#if !defined(MBEDTLS_DEPRECATED_REMOVED)
+    const int *MBEDTLS_PRIVATE(sig_hashes);         /*!< allowed signature hashes           */
+#endif
     const uint16_t *MBEDTLS_PRIVATE(sig_algs);      /*!< allowed signature algorithms       */
 #endif /* MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED */
 

library/ssl_tls.c

diff --git a/library/ssl_tls.c b/library/ssl_tls.c
index ecc9187..3794d38 100644
--- a/library/ssl_tls.c
+++ b/library/ssl_tls.c
@@ -2420,16 +2420,6 @@
 }
 
 #if defined(MBEDTLS_SSL_HANDSHAKE_WITH_CERT_ENABLED)
-#if !defined(MBEDTLS_DEPRECATED_REMOVED) && defined(MBEDTLS_SSL_PROTO_TLS1_2)
-/*
- * Set allowed/preferred hashes for handshake signatures
- */
-void mbedtls_ssl_conf_sig_hashes(mbedtls_ssl_config *conf,
-                                 const int *hashes)
-{
-    conf->sig_hashes = hashes;
-}
-#endif /* !MBEDTLS_DEPRECATED_REMOVED && MBEDTLS_SSL_PROTO_TLS1_2 */
 
 /* Configure allowed signature algorithms for handshake */
 void mbedtls_ssl_conf_sig_algs(mbedtls_ssl_config *conf,