commit 3517c20df77ed5e92427c0e0bcb6bb2a2b4326c4
author Manuel Pégourié-Gonnard <mpg@elzevir.fr> Fri Jul 03 17:43:06 2015 +0200
committer Manuel Pégourié-Gonnard <mpg@elzevir.fr> Fri Jul 03 17:43:06 2015 +0200
tree 1466f3bfa967c546b0c5a5f67af84983bebb0df9
parent f333174fa1ded0e2615809e9706a3737aa0e31fd

Up default server DH params to 2048 bits

library/ssl_tls.c

diff --git a/library/ssl_tls.c b/library/ssl_tls.c
index 41722e8..734bc8f 100644
--- a/library/ssl_tls.c
+++ b/library/ssl_tls.c
@@ -3075,9 +3075,9 @@
 
 #if defined(POLARSSL_DHM_C)
     if( ( ret = mpi_read_string( &ssl->dhm_P, 16,
-                                 POLARSSL_DHM_RFC5114_MODP_1024_P) ) != 0 ||
+                                 POLARSSL_DHM_RFC5114_MODP_2048_P) ) != 0 ||
         ( ret = mpi_read_string( &ssl->dhm_G, 16,
-                                 POLARSSL_DHM_RFC5114_MODP_1024_G) ) != 0 )
+                                 POLARSSL_DHM_RFC5114_MODP_2048_G) ) != 0 )
     {
         SSL_DEBUG_RET( 1, "mpi_read_string", ret );
         return( ret );