| commit | 2650515394537ad30110f322e56d3afe710d0886 | [log] [tgz] |
|---|---|---|
| author | Richard Levitte <levitte@openssl.org> | Fri Dec 30 21:57:28 2016 +0100 |
| committer | Matt Caswell <matt@openssl.org> | Thu Jan 26 10:54:01 2017 +0000 |
| tree | 8d8a0d93d4c54446d7a01748dbd87d7ea72c2688 | |
| parent | 2198b3a55de681e1f3c23edb0586afe13f438051 [diff] |
Better check of DH parameters in TLS data
When the client reads DH parameters from the TLS stream, we only
checked that they all are non-zero. This change updates the check to
use DH_check_params()
DH_check_params() is a new function for light weight checking of the p
and g parameters:
check that p is odd
check that 1 < g < p - 1
Reviewed-by: Viktor Dukhovni <viktor@openssl.org>