| commit | 52f2ff5b935636d7977182a5c2cad23848aa10d9 | [log] [tgz] |
|---|---|---|
| author | Ilya Shipitsin <chipitsine@gmail.com> | Sat Jul 23 23:55:19 2022 +0500 |
| committer | Willy Tarreau <w@1wt.eu> | Sat Aug 06 17:45:40 2022 +0200 |
| tree | 66dfa092f124959335d92bc757188436b1bfb697 | |
| parent | 3b64a28e156026526be0ca540c5950569f80a477 [diff] |
BUG/MEDIUM: fix DH length when EC key is used dh of length 1024 were chosen for EVP_PKEY_EC key type. let us pick "default_dh_param" instead. issue was found on Ubuntu 22.04 which is shipped with OpenSSL configured with SECLEVEL=2 by default. such SECLEVEL value prohibits DH shorter than 2048: OpenSSL error[0xa00018a] SSL_CTX_set0_tmp_dh_pkey: dh key too small better strategy for chosing DH still may be considered though.