diff options
| author | Daiki Ueno <dueno@redhat.com> | 2016-09-27 11:04:16 +0200 |
|---|---|---|
| committer | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2016-09-27 22:16:21 +0200 |
| commit | 2503f65550f52e4b17d6d06083f69dcfbb107194 (patch) | |
| tree | 1046377f6b08c77b046887d5cb29a72e588e9fc8 /src | |
| parent | fd52d56a6ed4c418475a71cb003930a16b218711 (diff) | |
| download | gnutls-2503f65550f52e4b17d6d06083f69dcfbb107194.tar.gz | |
certtool: print correct size of EC keys
Previously certtool complained about key size if --curve is given:
$ certtool --generate-privkey --ecc --curve secp256r1 --outfile key.pem
Generating a -2147483646 bit EC/ECDSA private key...
Note that ECDSA keys with size less than 256 are not widely supported.
Diffstat (limited to 'src')
| -rw-r--r-- | src/certtool.c | 23 |
1 files changed, 18 insertions, 5 deletions
diff --git a/src/certtool.c b/src/certtool.c index ecc1393bcc..60e49c2e75 100644 --- a/src/certtool.c +++ b/src/certtool.c @@ -132,12 +132,25 @@ generate_private_key_int(common_info_st * cinfo) bits = get_bits(key_type, cinfo->bits, cinfo->sec_param, 1); - fprintf(stdlog, "Generating a %d bit %s private key...\n", - bits, gnutls_pk_algorithm_get_name(key_type)); + if (key_type == GNUTLS_PK_EC) { + int ecc_bits; - if (bits < 256 && key_type == GNUTLS_PK_EC) - fprintf(stderr, - "Note that ECDSA keys with size less than 256 are not widely supported.\n\n"); + if (GNUTLS_BITS_ARE_CURVE(bits)) { + gnutls_ecc_curve_t curve = GNUTLS_BITS_TO_CURVE(bits); + ecc_bits = gnutls_ecc_curve_get_size(curve) * 8; + } else { + ecc_bits = bits; + } + fprintf(stdlog, "Generating a %d bit %s private key...\n", + ecc_bits, gnutls_pk_algorithm_get_name(key_type)); + + if (ecc_bits < 256) + fprintf(stderr, + "Note that ECDSA keys with size less than 256 are not widely supported.\n\n"); + } else { + fprintf(stdlog, "Generating a %d bit %s private key...\n", + bits, gnutls_pk_algorithm_get_name(key_type)); + } if (provable && (key_type != GNUTLS_PK_RSA && key_type != GNUTLS_PK_DSA)) { fprintf(stderr, |