summaryrefslogtreecommitdiffstats
path: root/crypto/x509/x_crl.c
diff options
context:
space:
mode:
authorShane Lontis <shane.lontis@oracle.com>2021-04-12 09:06:24 +1000
committerShane Lontis <shane.lontis@oracle.com>2021-04-14 16:01:13 +1000
commit46eee7104d77f9d303e06a398febdc60fd014d33 (patch)
treed826be79497504683f836f4c6a9d7c0b6a91f3d0 /crypto/x509/x_crl.c
parent0d5bbaaae2c65ddf7a30596b61617304e0950d9c (diff)
Add domain parameter match check for DH and ECDH key exchange.
Fixes #14808 Validation checks were moved into EVP_PKEY_derive_set_peer() which broke an external negative test. Originally the old code was semi working by checking the peers public key was in the range of other parties p. It was not actually ever checking that the domain parameters were consistent between the 2 parties. It now checks the parameters match as well as validating the peers public key. Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14823)
Diffstat (limited to 'crypto/x509/x_crl.c')
0 files changed, 0 insertions, 0 deletions