CVSROOT: /cvs Module name: src Changes by: m...@cvs.openbsd.org 2015/03/08 10:48:47
Modified files:
lib/libssl/src/ssl: s3_clnt.c
regress/lib/libssl/ssl: ssltest.c
Log message:
Reject DH keys sent by a server if they are considered too small; inspired
by a similar BoringSSL change, but raising the limit to 1024 bits.
ok jsing@ markus@ guenther@ deraadt@
