From 55d3fd9aff874046bdcd9067069280f35245eed7 Mon Sep 17 00:00:00 2001 From: Paul Bakker Date: Sun, 11 Dec 2011 11:13:05 +0000 Subject: [PATCH] - Enlarged maximum size of DHM a client accepts to 512 bytes --- library/ssl_cli.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/library/ssl_cli.c b/library/ssl_cli.c index a7900e40d..08aaf801f 100644 --- a/library/ssl_cli.c +++ b/library/ssl_cli.c @@ -395,7 +395,7 @@ static int ssl_parse_server_key_exchange( ssl_context *ssl ) return( POLARSSL_ERR_SSL_BAD_HS_SERVER_KEY_EXCHANGE ); } - if( ssl->dhm_ctx.len < 64 || ssl->dhm_ctx.len > 256 ) + if( ssl->dhm_ctx.len < 64 || ssl->dhm_ctx.len > 512 ) { SSL_DEBUG_MSG( 1, ( "bad server key exchange message" ) ); return( POLARSSL_ERR_SSL_BAD_HS_SERVER_KEY_EXCHANGE );