diff options
| author | Matt Caswell <matt@openssl.org> | 2016-05-27 14:26:03 +0200 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2016-06-01 14:19:02 +0200 |
| commit | eeb21772effdd385e44eed547d717f171487987e (patch) | |
| tree | 940efbf972cabbe7e1853a578fd3e23df20cade9 /doc/apps | |
| parent | Raise an Err when CRYPTO_THREAD_lock_new fails (diff) | |
| download | openssl-eeb21772effdd385e44eed547d717f171487987e.tar.xz openssl-eeb21772effdd385e44eed547d717f171487987e.zip | |
Add dhparam sanity check and update DH_check documentation
The -check argument to dhparam should never identify any problems if we
have just generated the parameters. Add a sanity check for this and print
an error and fail if necessary.
Also updates the documentation for the -check argument, and the DH_check()
function.
RT#4244
Reviewed-by: Richard Levitte <levitte@openssl.org>
Diffstat (limited to 'doc/apps')
| -rw-r--r-- | doc/apps/dhparam.pod | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/doc/apps/dhparam.pod b/doc/apps/dhparam.pod index 63cc0d372b..addd88a540 100644 --- a/doc/apps/dhparam.pod +++ b/doc/apps/dhparam.pod @@ -72,7 +72,8 @@ avoid small-subgroup attacks that may be possible otherwise. =item B<-check> -check if the parameters are valid primes and generator. +Performs numerous checks to see if the supplied parameters are valid and +displays a warning if not. =item B<-2>, B<-5> |