diff options
| author | Kurt Roeckx <kurt@roeckx.be> | 2016-01-10 13:55:08 +0100 |
|---|---|---|
| committer | Kurt Roeckx <kurt@roeckx.be> | 2016-01-11 00:01:52 +0100 |
| commit | a4530ce0398d673b25a15b72a18dee1d8b14c07d (patch) | |
| tree | e76b22f76a8871a3d56af925c0f2ce6ec38d9a47 /ssl | |
| parent | cb19c0d15f2f207771ef707b917e8a44912d7dc9 (diff) | |
| download | openssl-new-a4530ce0398d673b25a15b72a18dee1d8b14c07d.tar.gz | |
Change minimum DH size from 768 to 1024
Reviewed-by: Viktor Dukhovni <openssl-users@dukhovni.org>
Diffstat (limited to 'ssl')
| -rw-r--r-- | ssl/s3_clnt.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/ssl/s3_clnt.c b/ssl/s3_clnt.c index 8cbf46ad2f..04cc9f54a9 100644 --- a/ssl/s3_clnt.c +++ b/ssl/s3_clnt.c @@ -3610,7 +3610,7 @@ int ssl3_check_cert_and_algorithm(SSL *s) DH_free(dh_srvr); } - if ((!SSL_C_IS_EXPORT(s->s3->tmp.new_cipher) && dh_size < 768) + if ((!SSL_C_IS_EXPORT(s->s3->tmp.new_cipher) && dh_size < 1024) || (SSL_C_IS_EXPORT(s->s3->tmp.new_cipher) && dh_size < 512)) { SSLerr(SSL_F_SSL3_CHECK_CERT_AND_ALGORITHM, SSL_R_DH_KEY_TOO_SMALL); goto f_err; |