define subgroup bits for the weak and export parameters, to allow DH group generation.

diff --git a/lib/algorithms/secparams.c b/lib/algorithms/secparams.c
index 69acb96163e4c25a54b3664b5d57c8630b0b4af7..69425d4fd9c2dc89a32712023e140046ccf3435e 100644 (file)
--- a/lib/algorithms/secparams.c
+++ b/lib/algorithms/secparams.c
@@ -40,8 +40,8 @@ typedef struct
 
 static const gnutls_sec_params_entry sec_params[] = {
   {"Insecure", GNUTLS_SEC_PARAM_INSECURE, 0, 0, 0, 0, 0},
-  {"Export", GNUTLS_SEC_PARAM_EXPORT, 42, 512, 0, 0, 0},
-  {"Very weak", GNUTLS_SEC_PARAM_VERY_WEAK, 64, 727, 0, 0, 0},
+  {"Export", GNUTLS_SEC_PARAM_EXPORT, 42, 512, 0, 150, 0},
+  {"Very weak", GNUTLS_SEC_PARAM_VERY_WEAK, 64, 727, 0, 160, 0},
   {"Weak", GNUTLS_SEC_PARAM_WEAK, 72, 1008, 1024, 160, 160},
   {"Low", GNUTLS_SEC_PARAM_LOW, 80, 1248, 2048, 160, 160}, 
   {"Legacy", GNUTLS_SEC_PARAM_LEGACY, 96, 1776, 2048, 192, 192},