commit 5324d411da32d754a9658ff3eb5c1e59960d2bd9
author Manuel Pégourié-Gonnard <mpg@elzevir.fr> Fri Jun 26 18:20:34 2015 +0200
committer Manuel Pégourié-Gonnard <mpg@elzevir.fr> Mon Jun 29 18:54:28 2015 +0200
tree 30ac9742fda10936a4b87e064d82bedc3084b3a2
parent 7b209579c693eb12f3338fe03e29b7d889baeedb

Up min size of DHM params to 1024 bits

library/ssl_cli.c

diff --git a/library/ssl_cli.c b/library/ssl_cli.c
index 0817ea7..db9e179 100644
--- a/library/ssl_cli.c
+++ b/library/ssl_cli.c
@@ -778,7 +778,8 @@
         return( POLARSSL_ERR_SSL_BAD_HS_SERVER_KEY_EXCHANGE );
     }
 
-    if( ssl->handshake->dhm_ctx.len < 64 || ssl->handshake->dhm_ctx.len > 512 )
+    if( ssl->handshake->dhm_ctx.len < SSL_MIN_DHM_BYTES ||
+        ssl->handshake->dhm_ctx.len > 512 )
     {
         SSL_DEBUG_MSG( 1, ( "bad server key exchange message" ) );
         return( POLARSSL_ERR_SSL_BAD_HS_SERVER_KEY_EXCHANGE );