Changeset 74f798f in mod_gnutls for src/gnutls_hooks.c

Timestamp:

Oct 3, 2011, 8:54:22 AM (9 years ago)

Author:

Dash Shendy <neuromancer@…>

Branches:

debian/master, debian/stretch-backports, jessie-backports, master, msva, proxy-ticket, upstream

Children:

da8c2fe

Parents:

fe42bfb

Message:

Added Debug logging and user warning for not spec. DH Params

File:

• src/gnutls_hooks.c (modified) (2 diffs)

src/gnutls_hooks.c

@@ -317 +317 @@
 
     if (sc_base->dh_params == NULL) {
-        rv = gnutls_dh_params_generate2 (dh_params, 
-                gnutls_sec_param_to_pk_bits(GNUTLS_PK_DH,GNUTLS_SEC_PARAM_HIGH));
+        int dh_bits = gnutls_sec_param_to_pk_bits(GNUTLS_PK_DH,
+                GNUTLS_SEC_PARAM_NORMAL);
+        ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, s,
+            "GnuTLS: Generating DH Params of %i bits\n"
+            "To avoid this use GnuTLSDHFile to specify DH Params for this host",
+            dh_bits);                
+        rv = gnutls_dh_params_generate2 (dh_params,dh_bits);
         if (rv < 0) {
             ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, s,
@@ -325 +330 @@
             exit(rv);
         }
+#if MOD_GNUTLS_DEBUG
+            ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r,
+                    "GnuTLS: Generated DH Params of %i bits",dh_bits);
+#endif        
     } else {
         dh_params = sc_base->dh_params;