python-cryptography/0001-disable-sha1-signature.patch
2023-03-14 09:12:04 +01:00

13 lines
663 B
Diff

diff --git a/src/cryptography/hazmat/backends/openssl/backend.py b/src/cryptography/hazmat/backends/openssl/backend.py
index 48f4265b0..31b1f3b20 100644
--- a/src/cryptography/hazmat/backends/openssl/backend.py
+++ b/src/cryptography/hazmat/backends/openssl/backend.py
@@ -333,7 +333,7 @@ class Backend:
) -> bool:
# Dedicated check for hashing algorithm use in message digest for
# signatures, e.g. RSA PKCS#1 v1.5 SHA1 (sha1WithRSAEncryption).
- if self._fips_enabled and isinstance(algorithm, hashes.SHA1):
+ if isinstance(algorithm, hashes.SHA1):
return False
return self.hash_supported(algorithm)