From: Mark Andrews <marka@isc.org>
Date: Tue, 10 Oct 2006 02:30:10 +0000 (+0000)
Subject: Use F5 as large RSA exponent w/ OpenSSL 0.9.8
X-Git-Tag: v9.5.0a1~126
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=14a2b06605609ade030a7c634ec91b74b70bf19b;p=thirdparty%2Fbind9.git

Use F5 as large RSA exponent w/ OpenSSL 0.9.8
---

diff --git a/lib/dns/opensslrsa_link.c b/lib/dns/opensslrsa_link.c
index b0356cf4055..335816f71a9 100644
--- a/lib/dns/opensslrsa_link.c
+++ b/lib/dns/opensslrsa_link.c
@@ -17,7 +17,7 @@
 
 /*
  * Principal Author: Brian Wellington
- * $Id: opensslrsa_link.c,v 1.8 2006/10/02 01:44:27 marka Exp $
+ * $Id: opensslrsa_link.c,v 1.9 2006/10/10 02:30:10 marka Exp $
  */
 #ifdef OPENSSL
 
@@ -274,11 +274,11 @@ opensslrsa_compare(const dst_key_t *key1, const dst_key_t *key2) {
 static isc_result_t
 opensslrsa_generate(dst_key_t *key, int exp) {
 #if OPENSSL_VERSION_NUMBER > 0x00908000L
-        BN_GENCB cb;
-        RSA *rsa = RSA_new();
-        BIGNUM *e = BN_new();
+	BN_GENCB cb;
+	RSA *rsa = RSA_new();
+	BIGNUM *e = BN_new();
 
-        if (rsa == NULL || e == NULL)
+	if (rsa == NULL || e == NULL)
 		goto err;
 
 	if (exp == 0) {
@@ -286,27 +286,26 @@ opensslrsa_generate(dst_key_t *key, int exp) {
 		BN_set_bit(e, 0);
 		BN_set_bit(e, 16);
 	} else {
-		/* 0x40000003 */
+		/* F5 0x100000001 */
 		BN_set_bit(e, 0);
-		BN_set_bit(e, 1);
-		BN_set_bit(e, 30);
+		BN_set_bit(e, 32);
 	}
 
-        BN_GENCB_set_old(&cb, NULL, NULL);
+	BN_GENCB_set_old(&cb, NULL, NULL);
 
-        if (RSA_generate_key_ex(rsa, key->key_size, e, &cb)) {
-                BN_free(e);
+	if (RSA_generate_key_ex(rsa, key->key_size, e, &cb)) {
+		BN_free(e);
 		SET_FLAGS(rsa);
 		key->opaque = rsa;
 		return (ISC_R_SUCCESS);
-        }
+	}
 
 err:
-        if (e != NULL)
+	if (e != NULL)
 		BN_free(e);
-        if (rsa != NULL)
+	if (rsa != NULL)
 		RSA_free(rsa);
-        return (dst__openssl_toresult(DST_R_OPENSSLFAILURE));
+	return (dst__openssl_toresult(DST_R_OPENSSLFAILURE));
 #else
 	RSA *rsa;
 	unsigned long e;