Re: [PATCH 0/2] gnutls: Be more clever about DH key size

2021-12-22 Thread Martin Kletzander
On Wed, Dec 22, 2021 at 02:14:59PM +0100, Ján Tomko wrote: On a Wednesday in 2021, Martin Kletzander wrote: On Tue, Dec 21, 2021 at 03:22:57PM +0100, Michal Privoznik wrote: See 2/2 for explanation. Ideally, we wouldn't use gnutls_dh_params_generate2() at all, per [1]. But that would require

Re: [PATCH 0/2] gnutls: Be more clever about DH key size

2021-12-22 Thread Ján Tomko
On a Wednesday in 2021, Martin Kletzander wrote: On Tue, Dec 21, 2021 at 03:22:57PM +0100, Michal Privoznik wrote: See 2/2 for explanation. Ideally, we wouldn't use gnutls_dh_params_generate2() at all, per [1]. But that would require bumping minimal required version to gnutls-3.6.0 and I'm not

Re: [PATCH 0/2] gnutls: Be more clever about DH key size

2021-12-22 Thread Martin Kletzander
On Tue, Dec 21, 2021 at 03:22:57PM +0100, Michal Privoznik wrote: See 2/2 for explanation. Ideally, we wouldn't use gnutls_dh_params_generate2() at all, per [1]. But that would require bumping minimal required version to gnutls-3.6.0 and I'm not sure how available it is in OSes we support.

[PATCH 0/2] gnutls: Be more clever about DH key size

2021-12-21 Thread Michal Privoznik
See 2/2 for explanation. Ideally, we wouldn't use gnutls_dh_params_generate2() at all, per [1]. But that would require bumping minimal required version to gnutls-3.6.0 and I'm not sure how available it is in OSes we support. Therefore, for now let's stick with patch 2/2. 1: