Merge "MD5 and SHA-1 are not actually approved in the TLS KDF." into udc-qpr-dev