Need better code in the DH parameter rejection case, add comment to
that effect. git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19165 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -305,8 +305,10 @@ get_dh_param(krb5_context context,
|
|||||||
ret = _krb5_dh_group_ok(context, config->pkinit_dh_min_bits,
|
ret = _krb5_dh_group_ok(context, config->pkinit_dh_min_bits,
|
||||||
&dhparam.p, &dhparam.g, &dhparam.q, moduli,
|
&dhparam.p, &dhparam.g, &dhparam.q, moduli,
|
||||||
&client_params->dh_group_name);
|
&client_params->dh_group_name);
|
||||||
if (ret)
|
if (ret) {
|
||||||
|
/* XXX send back proposal of better group */
|
||||||
goto out;
|
goto out;
|
||||||
|
}
|
||||||
|
|
||||||
dh = DH_new();
|
dh = DH_new();
|
||||||
if (dh == NULL) {
|
if (dh == NULL) {
|
||||||
|
Reference in New Issue
Block a user