Need better code in the DH parameter rejection case, add comment to

that effect.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19165 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2006-11-28 03:41:55 +00:00
parent ab26720928
commit 5b304e5f20

View File

@@ -305,8 +305,10 @@ get_dh_param(krb5_context context,
ret = _krb5_dh_group_ok(context, config->pkinit_dh_min_bits, ret = _krb5_dh_group_ok(context, config->pkinit_dh_min_bits,
&dhparam.p, &dhparam.g, &dhparam.q, moduli, &dhparam.p, &dhparam.g, &dhparam.q, moduli,
&client_params->dh_group_name); &client_params->dh_group_name);
if (ret) if (ret) {
/* XXX send back proposal of better group */
goto out; goto out;
}
dh = DH_new(); dh = DH_new();
if (dh == NULL) { if (dh == NULL) {