Synchronize DH_check() mostly with OpenSSL 1.1.1 with some
authortb <tb@openbsd.org>
Mon, 29 Nov 2021 19:47:47 +0000 (19:47 +0000)
committertb <tb@openbsd.org>
Mon, 29 Nov 2021 19:47:47 +0000 (19:47 +0000)
commit2cad8c6edbe08217df544501aff65e464af3675b
tree5c58e01dee5f5e87c4e629e3d84560ca85a3afa3
parentaacfb2c75d5518a48c53cdcef30384dcec7e9bd2
Synchronize DH_check() mostly with OpenSSL 1.1.1 with some
simplifications and readability tweaks.  This ensures in
particular that dh->q is suitable if present.

Based on work by Stephen Henson and Bernd Edlinger in OpenSSL.

Issues with the current implementation found via regression
tests in py-cryptography.

ok inoguchi jsing
lib/libcrypto/dh/dh_check.c