diff options
| author | Bernd Edlinger <bernd.edlinger@hotmail.de> | 2019-09-06 23:38:49 +0200 |
|---|---|---|
| committer | Bernd Edlinger <bernd.edlinger@hotmail.de> | 2019-09-09 14:43:57 +0200 |
| commit | feeb7ecd2f272e1c195e51cefc0d6b0199fef1d0 (patch) | |
| tree | 55d374b46d9a18051f2243f8944d20568c9cd490 /doc | |
| parent | bfed4fc8367b55e630c70cc038887ddf9b090dd6 (diff) | |
Check the DH modulus bit length
The check was missing in DH_check and DH_check_params.
[extended tests]
Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/9796)
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/man3/DH_generate_parameters.pod | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/doc/man3/DH_generate_parameters.pod b/doc/man3/DH_generate_parameters.pod index a1541caf68..4908dcf515 100644 --- a/doc/man3/DH_generate_parameters.pod +++ b/doc/man3/DH_generate_parameters.pod @@ -73,6 +73,14 @@ The generator B<g> is not suitable. Note that the lack of this bit doesn't guarantee that B<g> is suitable, unless B<p> is known to be a strong prime. +=item DH_MODULUS_TOO_SMALL + +The modulus is too small. + +=item DH_MODULUS_TOO_LARGE + +The modulus is too large. + =back DH_check() confirms that the Diffie-Hellman parameters B<dh> are valid. The @@ -141,7 +149,7 @@ DH_generate_parameters_ex() instead. =head1 COPYRIGHT -Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000-2019 The OpenSSL Project Authors. All Rights Reserved. Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy |