3027 |
|
break; |
3028 |
|
} |
3029 |
|
|
3030 |
< |
if (RSA_size(ConfigServerInfo.rsa_private_key) < 128) |
3030 |
> |
if (RSA_size(ConfigServerInfo.rsa_private_key) < 256) |
3031 |
|
{ |
3032 |
|
RSA_free(ConfigServerInfo.rsa_private_key); |
3033 |
|
ConfigServerInfo.rsa_private_key = NULL; |
3034 |
|
|
3035 |
< |
conf_error_report("Ignoring serverinfo::rsa_private_key_file -- need at least a 1024 bit key size"); |
3035 |
> |
conf_error_report("Ignoring serverinfo::rsa_private_key_file -- need at least a 2048 bit key size"); |
3036 |
|
} |
3037 |
|
#endif |
3038 |
|
} |
3055 |
|
|
3056 |
|
if (dh) |
3057 |
|
{ |
3058 |
< |
if (DH_size(dh) < 128) |
3059 |
< |
conf_error_report("Ignoring serverinfo::ssl_dh_param_file -- need at least a 1024 bit DH prime size"); |
3058 |
> |
if (DH_size(dh) < 256) |
3059 |
> |
conf_error_report("Ignoring serverinfo::ssl_dh_param_file -- need at least a 2048 bit DH prime size"); |
3060 |
|
else |
3061 |
|
SSL_CTX_set_tmp_dh(ConfigServerInfo.server_ctx, dh); |
3062 |
|
|
3123 |
|
|
3124 |
|
SSL_CTX_set_tmp_ecdh(ConfigServerInfo.server_ctx, key); |
3125 |
|
EC_KEY_free(key); |
3126 |
< |
} |
3126 |
> |
} |
3127 |
|
#endif |
3128 |
|
#endif |
3129 |
|
} |