Respect Policy when negotiating hash algorithm

This commit is contained in:
Paul Schaub 2021-01-29 15:15:27 +01:00
parent d7ef05775d
commit ff1fb7e07f
Signed by: vanitasvitae
GPG Key ID: 62BEE9264BF17311
1 changed files with 2 additions and 1 deletions

View File

@ -29,6 +29,7 @@ import org.bouncycastle.openpgp.PGPSecretKey;
import org.bouncycastle.openpgp.PGPSignature;
import org.bouncycastle.openpgp.PGPSignatureGenerator;
import org.bouncycastle.openpgp.operator.bc.BcPGPContentSignerBuilder;
import org.pgpainless.PGPainless;
import org.pgpainless.algorithm.HashAlgorithm;
import org.pgpainless.algorithm.SignatureType;
import org.pgpainless.implementation.ImplementationFactory;
@ -57,7 +58,7 @@ public class SignatureUtils {
private static HashAlgorithm negotiateHashAlgorithm(List<HashAlgorithm> preferredHashAlgorithms) {
if (preferredHashAlgorithms.isEmpty()) {
return HashAlgorithm.SHA512;
return PGPainless.getPolicy().getDefaultSignatureHashAlgorithm();
}
return preferredHashAlgorithms.get(0);
}