Clean up and refactor server side DHE key exchange.
authorjsing <jsing@openbsd.org>
Sat, 4 Dec 2021 14:03:22 +0000 (14:03 +0000)
committerjsing <jsing@openbsd.org>
Sat, 4 Dec 2021 14:03:22 +0000 (14:03 +0000)
commit40050a9450385022d29feb511478c0c8ce6e4838
tree56ebbea4d086f8d304de8dd743a24b4a460f3466
parentdfc82f2a7e9bc16b1d53aa021c9590aeab73eff3
Clean up and refactor server side DHE key exchange.

Provide ssl_kex_generate_dhe_params_auto() which handles DHE key generation
based on parameters determined by the specified key bits. Convert the
existing DHE auto parameter selection code into a function that just tells
us how many key bits to use.

Untangle and rework the server side DHE key exchange to use the ssl_kex_*
functions.

ok inoguchi@ tb@
lib/libssl/ssl_kex.c
lib/libssl/ssl_lib.c
lib/libssl/ssl_locl.h
lib/libssl/ssl_srvr.c