diff options
author | Yawning Angel <yawning@schwanenlied.me> | 2016-02-02 22:03:48 +0000 |
---|---|---|
committer | Yawning Angel <yawning@schwanenlied.me> | 2016-02-02 22:03:48 +0000 |
commit | c625ab9f5a36a99f9dff2fa842d2e43d23ad1908 (patch) | |
tree | 57345c57cefbbf3356f4f63964c330e972defb54 /changes/bug18221 | |
parent | f087a895d31f72c74d415719eafd1ac55d3526d9 (diff) | |
download | tor-c625ab9f5a36a99f9dff2fa842d2e43d23ad1908.tar.gz tor-c625ab9f5a36a99f9dff2fa842d2e43d23ad1908.zip |
Validate the DH parameters for correctness.
We use sensible parameters taken from common sources, and no longer
have dynamic DH groups as an option, but it feels prudent to have
OpenSSL validate p and g at initialization time.
Diffstat (limited to 'changes/bug18221')
-rw-r--r-- | changes/bug18221 | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/changes/bug18221 b/changes/bug18221 new file mode 100644 index 0000000000..afc240422a --- /dev/null +++ b/changes/bug18221 @@ -0,0 +1,3 @@ + o Minor features (crypto): + - Validate the Diffie-Hellman hard coded parameters and ensure that + p is a safe prime, and g is suitable. Closes ticket 18221. |