Added hack for nettle's checks.

diff --git a/lib/nettle/pk.c b/lib/nettle/pk.c
index dc745e99c35341cfadd6ecd137489b754d498cee..eb4c9b0f8f2dfb354af87bb745c19a853a5b2e81 100644 (file)
--- a/lib/nettle/pk.c
+++ b/lib/nettle/pk.c
@@ -793,6 +793,14 @@ wrap_nettle_pk_generate_params(gnutls_pk_algorithm_t algo,
                                goto dsa_fail;
                        }
 #else
+                       /* unfortunately nettle only accepts 160 or 256
+                        * q_bits size. The check below makes sure we handle
+                        * cases in between by rounding up, but fail when
+                        * larger numbers are requested. */
+                       if (q_bits < 160)
+                               q_bits = 160;
+                       else if (q_bits > 160 && q_bits <= 256)
+                               q_bits = 256;
                        ret =
                            dsa_generate_keypair(&pub, &priv,
                                                 NULL, rnd_func,