]> git.ipfire.org Git - thirdparty/hostap.git/commit
OpenSSL: Force RSA 3072-bit key size limit for Suite B
authorJouni Malinen <jouni@qca.qualcomm.com>
Sun, 17 Sep 2017 16:05:19 +0000 (19:05 +0300)
committerJouni Malinen <j@w1.fi>
Mon, 18 Sep 2017 09:12:48 +0000 (12:12 +0300)
commit4eb8cfe06ba9dfb7b1e8d6bf0dc387399726e164
tree87afffe1eafcb64c7fc141dcef1ef613235e5088
parent6418400db9c2707b5b37789cde67ef96507c08cb
OpenSSL: Force RSA 3072-bit key size limit for Suite B

Reject a peer certificate chain if it includes an RSA public key that
does not use sufficient key length to meet the Suite B 192-bit level
requirement (<= 3k (3072) bits).

Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
src/crypto/tls.h
src/crypto/tls_openssl.c