# This subpolicy adds SHA1 hash and signature support

hash = SHA1+

sign = ECDSA-SHA1+ RSA-PSS-SHA1+ RSA-SHA1+

sha1_in_certs = 1

# https://fedoraproject.org/wiki/Changes/OpenSSLDistrustSHA1SigVer
__openssl_block_sha1_signatures = 0
