]> git.ipfire.org Git - thirdparty/libvirt.git/commitdiff
virnettlscontext: Drop gnutls_dh_set_prime_bits()
authorMichal Privoznik <mprivozn@redhat.com>
Tue, 21 Dec 2021 09:05:00 +0000 (10:05 +0100)
committerMichal Privoznik <mprivozn@redhat.com>
Mon, 3 Jan 2022 09:23:29 +0000 (10:23 +0100)
According to the gnutls_dh_set_prime_bits() manpage:

  The function has no effect in server side.

Therefore, don't call it when creating server side context.

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Ani Sinha <ani@anisinha.ca>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
src/rpc/virnettlscontext.c

index 1a3dd92676f7b1c4292f8cd1568f268bc3fc83d2..3b6687e7f4e29a08c2f84f8f82a8a48415575349 100644 (file)
@@ -1233,8 +1233,6 @@ virNetTLSSession *virNetTLSSessionNew(virNetTLSContext *ctxt,
      */
     if (ctxt->isServer) {
         gnutls_certificate_server_set_request(sess->session, GNUTLS_CERT_REQUEST);
-
-        gnutls_dh_set_prime_bits(sess->session, DH_BITS);
     }
 
     gnutls_transport_set_ptr(sess->session, sess);