]> git.ipfire.org Git - thirdparty/hostap.git/commit
OpenSSL: Force RSA 3072-bit DH prime size limit for Suite B
authorJouni Malinen <jouni@qca.qualcomm.com>
Sun, 17 Sep 2017 19:50:02 +0000 (22:50 +0300)
committerJouni Malinen <j@w1.fi>
Mon, 18 Sep 2017 09:12:48 +0000 (12:12 +0300)
commit1c9663cf6b87961c89aafb5af15f36caefda8d0a
treef853db826b15b958c65952977d057624d784f58b
parent2ed70c7586326507896022926b35f9b28ff6d8b9
OpenSSL: Force RSA 3072-bit DH prime size limit for Suite B

Reject a DHE handshake if the server uses a DH prime that does not have
sufficient length to meet the Suite B 192-bit level requirement (<= 3k
(3072) bits).

Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
src/crypto/tls_openssl.c