ssl: do not choose auto DH groups that are weaker than the security level
authorPauli <pauli@openssl.org>
Fri, 18 Jun 2021 02:54:24 +0000 (12:54 +1000)
committerPauli <pauli@openssl.org>
Sat, 19 Jun 2021 05:49:46 +0000 (15:49 +1000)
commitd7b5c648d682b499b71320a03747602a6ba4dec3
treee862a77bf88186198192164adc3ed5bf1f61c5ae
parentb9d022d78faee0648c3ace7f15ccec08f14feddb
ssl: do not choose auto DH groups that are weaker than the security level

Fixes #15808

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/15818)
ssl/ssl_cert.c
ssl/ssl_local.h
ssl/t1_lib.c