From: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date: Sat, 19 Sep 2015 09:30:39 +0000 (+0200)
Subject: DSA FIPS186-4 key generation: print the required seed length on mismatch
X-Git-Tag: gnutls_3_5_0~659
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=139a699d2836bdccfa7133d8ae2ee04ee25891ca;p=thirdparty%2Fgnutls.git

DSA FIPS186-4 key generation: print the required seed length on mismatch
---

diff --git a/lib/nettle/int/dsa-keygen-fips186.c b/lib/nettle/int/dsa-keygen-fips186.c
index ca073b452e..75a7535893 100644
--- a/lib/nettle/int/dsa-keygen-fips186.c
+++ b/lib/nettle/int/dsa-keygen-fips186.c
@@ -424,8 +424,10 @@ _dsa_generate_dss_pqg(struct dsa_params *params,
 	if (cert->seed_length > sizeof(cert->seed))
 		return 0;
 
-	if (cert->seed_length != seed_size)
+	if (cert->seed_length != seed_size) {
+		_gnutls_debug_log("Seed length must be %d bytes\n", cert->seed_length);
 		return 0;
+	}
 
 	memcpy(cert->seed, seed, cert->seed_length);