From: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date: Mon, 7 Apr 2014 22:08:56 +0000 (+0200)
Subject: modify to conform to the documentated level.
X-Git-Tag: gnutls_3_3_0~30
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=a078a627f03837aebb4bf630786faed9b248ac18;p=thirdparty%2Fgnutls.git

modify to conform to the documentated level.
---

diff --git a/lib/gnutls_priority.c b/lib/gnutls_priority.c
index 7a85c6ea3c..bfda106c2a 100644
--- a/lib/gnutls_priority.c
+++ b/lib/gnutls_priority.c
@@ -674,8 +674,8 @@ int check_level(const char *level, gnutls_priority_t priority_cache,
 		func(&priority_cache->sign_algo, sign_priority_default);
 		func(&priority_cache->supported_ecc, supported_ecc_normal);
 
-		SET_PROFILE(GNUTLS_PROFILE_LOW);
-		SET_LEVEL(GNUTLS_SEC_PARAM_LOW);
+		SET_PROFILE(GNUTLS_PROFILE_LOW); /* set certificate level */
+		SET_LEVEL(GNUTLS_SEC_PARAM_WEAK); /* set DH params level */
 		return 1;
 	} else if (strcasecmp(level, LEVEL_NORMAL) == 0) {
 		func(&priority_cache->cipher, cipher_priority_normal);
@@ -685,7 +685,7 @@ int check_level(const char *level, gnutls_priority_t priority_cache,
 		func(&priority_cache->supported_ecc, supported_ecc_normal);
 
 		SET_PROFILE(GNUTLS_PROFILE_LOW);
-		SET_LEVEL(GNUTLS_SEC_PARAM_LOW);
+		SET_LEVEL(GNUTLS_SEC_PARAM_WEAK);
 		return 1;
 	} else if (strcasecmp(level, LEVEL_PFS) == 0) {
 		func(&priority_cache->cipher, cipher_priority_normal);
@@ -695,7 +695,7 @@ int check_level(const char *level, gnutls_priority_t priority_cache,
 		func(&priority_cache->supported_ecc, supported_ecc_normal);
 
 		SET_PROFILE(GNUTLS_PROFILE_LOW);
-		SET_LEVEL(GNUTLS_SEC_PARAM_LOW);
+		SET_LEVEL(GNUTLS_SEC_PARAM_WEAK);
 		return 1;
 	} else if (strcasecmp(level, LEVEL_SECURE256) == 0
 		   || strcasecmp(level, LEVEL_SECURE192) == 0) {