Commit f5fc9404 authored by Kurt Roeckx's avatar Kurt Roeckx
Browse files

Change minimum DH size from 768 to 1024 



Reviewed-by: default avatarViktor Dukhovni <openssl-users@dukhovni.org>
parent ff9cef02

CHANGES

+2 −1
Original line number Diff line number Diff line
@@ -4,7 +4,8 @@ 


 Changes between 1.0.1q and 1.0.1r [xx XXX xxxx]



  *)

  *) Reject DH handshakes with parameters shorter than 1024 bits.

     [Kurt Roeckx]



 Changes between 1.0.1p and 1.0.1q [3 Dec 2015]

ssl/s3_clnt.c

+1 −1
Original line number Diff line number Diff line
@@ -3417,7 +3417,7 @@ int ssl3_check_cert_and_algorithm(SSL *s) 
    /* Check DHE only: static DH not implemented. */

    if (alg_k & SSL_kEDH) {

        int dh_size = BN_num_bits(dh->p);

        if ((!SSL_C_IS_EXPORT(s->s3->tmp.new_cipher) && dh_size < 768)

        if ((!SSL_C_IS_EXPORT(s->s3->tmp.new_cipher) && dh_size < 1024)

            || (SSL_C_IS_EXPORT(s->s3->tmp.new_cipher) && dh_size < 512)) {

            SSLerr(SSL_F_SSL3_CHECK_CERT_AND_ALGORITHM, SSL_R_DH_KEY_TOO_SMALL);

            goto f_err;