summaryrefslogtreecommitdiff
path: root/changes/bug18221
diff options
context:
space:
mode:
authorYawning Angel <yawning@schwanenlied.me>2016-02-02 22:03:48 +0000
committerYawning Angel <yawning@schwanenlied.me>2016-02-02 22:03:48 +0000
commitc625ab9f5a36a99f9dff2fa842d2e43d23ad1908 (patch)
tree57345c57cefbbf3356f4f63964c330e972defb54 /changes/bug18221
parentf087a895d31f72c74d415719eafd1ac55d3526d9 (diff)
downloadtor-c625ab9f5a36a99f9dff2fa842d2e43d23ad1908.tar.gz
tor-c625ab9f5a36a99f9dff2fa842d2e43d23ad1908.zip
Validate the DH parameters for correctness.
We use sensible parameters taken from common sources, and no longer have dynamic DH groups as an option, but it feels prudent to have OpenSSL validate p and g at initialization time.
Diffstat (limited to 'changes/bug18221')
-rw-r--r--changes/bug182213
1 files changed, 3 insertions, 0 deletions
diff --git a/changes/bug18221 b/changes/bug18221
new file mode 100644
index 0000000000..afc240422a
--- /dev/null
+++ b/changes/bug18221
@@ -0,0 +1,3 @@
+ o Minor features (crypto):
+ - Validate the Diffie-Hellman hard coded parameters and ensure that
+ p is a safe prime, and g is suitable. Closes ticket 18221.