projects / oweals / openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 923ffa9) | patch
Check for missing DSA parameters.
authorDr. Stephen Henson <steve@openssl.org>
Wed, 30 Dec 2015 13:34:53 +0000 (13:34 +0000)
committerDr. Stephen Henson <steve@openssl.org>
Wed, 30 Dec 2015 13:34:53 +0000 (13:34 +0000)
commit72245f340c41c7d04b7a2b7a99aec9897e22d9cb
tree5063291084666d4cc180c5b4086e1cc65e0748eatree | snapshot
parent923ffa97d1278a155d2ec7783c997fb7e2c5e28bcommit | diff
Check for missing DSA parameters.

If DSA parameters are absent return -1 (for unknown) in DSA_security_bits.

If parameters are absent when a certificate is set in an SSL/SSL_CTX
structure this will reject the certificate by default. This will cause DSA
certificates which omit parameters to be rejected but that is never (?)
done in practice.

Thanks to Brian 'geeknik' Carpenter for reporting this issue.

Reviewed-by: Emilia Käsper <emilia@openssl.org>
crypto/dsa/dsa_lib.c diff | blob | history
ssl/t1_lib.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.