From: Michal Privoznik <mprivozn@redhat.com>
Date: Tue, 21 Dec 2021 09:05:00 +0000 (+0100)
Subject: virnettlscontext: Drop gnutls_dh_set_prime_bits()
X-Git-Tag: v8.0.0-rc1~87
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=fb474c33ccc2c2726a2d6f9396effed13bfff9e8;p=thirdparty%2Flibvirt.git

virnettlscontext: Drop gnutls_dh_set_prime_bits()

According to the gnutls_dh_set_prime_bits() manpage:

  The function has no effect in server side.

Therefore, don't call it when creating server side context.

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Ani Sinha <ani@anisinha.ca>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
---

diff --git a/src/rpc/virnettlscontext.c b/src/rpc/virnettlscontext.c
index 1a3dd92676..3b6687e7f4 100644
--- a/src/rpc/virnettlscontext.c
+++ b/src/rpc/virnettlscontext.c
@@ -1233,8 +1233,6 @@ virNetTLSSession *virNetTLSSessionNew(virNetTLSContext *ctxt,
      */
     if (ctxt->isServer) {
         gnutls_certificate_server_set_request(sess->session, GNUTLS_CERT_REQUEST);
-
-        gnutls_dh_set_prime_bits(sess->session, DH_BITS);
     }
 
     gnutls_transport_set_ptr(sess->session, sess);