Validate the DH parameters for correctness.

We use sensible parameters taken from common sources, and no longer
have dynamic DH groups as an option, but it feels prudent to have
OpenSSL validate p and g at initialization time.
This commit is contained in:
Yawning Angel
2016-02-02 22:03:48 +00:00
parent f087a895d3
commit c625ab9f5a
2 changed files with 74 additions and 8 deletions
+3
View File
@@ -0,0 +1,3 @@
o Minor features (crypto):
- Validate the Diffie-Hellman hard coded parameters and ensure that
p is a safe prime, and g is suitable. Closes ticket 18221.