Add a secop handler for tmp_dh
authortb <tb@openbsd.org>
Tue, 28 Jun 2022 20:49:16 +0000 (20:49 +0000)
committertb <tb@openbsd.org>
Tue, 28 Jun 2022 20:49:16 +0000 (20:49 +0000)
commit97a397f33c55934406523ef1dc33c6595c280a92
tree1d5c7f9844990dc7a6a0618c2508d20d7f1c77e6
parent9be8472ba52c1a9f37b1ca315b94647fe080cc48
Add a secop handler for tmp_dh

This disallows DHE keys weaker than 1024 bits at level 0 to match
OpenSSL behavior.

ok beck jsing sthen
lib/libssl/ssl_seclevel.c