X-Git-Url: https://www.bearssl.org/gitweb//home/git/?p=BearSSL;a=blobdiff_plain;f=src%2Fssl%2Fssl_single_rsa.c;h=2ddbff99754c7566e36335834cf01e927a06ab73;hp=e174d9108ed43ea1bf5138e3263367715dacae4a;hb=93185df1e78b2d0a06e155cdf255391cff53cfed;hpb=3210f38e0491b39aec1ef419cb4114e9483089fb

diff --git a/src/ssl/ssl_single_rsa.c b/src/ssl/ssl_single_rsa.c
index e174d91..2ddbff9 100644
--- a/src/ssl/ssl_single_rsa.c
+++ b/src/ssl/ssl_single_rsa.c
@@ -37,6 +37,9 @@ sr_choose(const br_ssl_server_policy_class **pctx,
 	pc = (br_ssl_server_policy_rsa_context *)pctx;
 	st = br_ssl_server_get_client_suites(cc, &st_num);
 	hash_id = br_ssl_choose_hash(br_ssl_server_get_client_hashes(cc));
+	if (cc->eng.session.version < BR_TLS12) {
+		hash_id = 0;
+	}
 	choices->chain = pc->chain;
 	choices->chain_len = pc->chain_len;
 	for (u = 0; u < st_num; u ++) {