generic-library/curl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

mbedtls:new profile with RSA min key len = 1024.

Browse Source 
Closes #502
This commit is contained in:
m-gardet
2015-10-21 09:30:31 +02:00
committed by Daniel Stenberg
parent 9744ef2289
commit ace68fdc0c
1 changed files with 22 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
lib/vtls/mbedtls.c
View File

@@ -123,6 +123,24 @@ static void mbedtls_debug(void *context, int level, const char *line)
# endif # endif
#endif #endif
/*
* profile
*/
const mbedtls_x509_crt_profile mbedtls_x509_crt_profile_fr =
{
/* Hashes from SHA-1 and above */
MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA1 ) |
MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_RIPEMD160 ) |
MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA224 ) |
MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA256 ) |
MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA384 ) |
MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA512 ),
0xFFFFFFF, /* Any PK alg */
0xFFFFFFF, /* Any curve */
1024, /* RSA min key len */
};
static Curl_recv mbedtls_recv; static Curl_recv mbedtls_recv;
static Curl_send mbedtls_send; static Curl_send mbedtls_send;
@@ -274,7 +292,6 @@ mbedtls_connect_step1(struct connectdata *conn,
infof(data, "mbedTLS: Connecting to %s:%d\n", infof(data, "mbedTLS: Connecting to %s:%d\n",
conn->host.name, conn->remote_port); conn->host.name, conn->remote_port);
mbedtls_ssl_config_init(&connssl->config); mbedtls_ssl_config_init(&connssl->config);
mbedtls_ssl_init(&connssl->ssl); mbedtls_ssl_init(&connssl->ssl);
@@ -291,6 +308,10 @@ mbedtls_connect_step1(struct connectdata *conn,
return CURLE_SSL_CONNECT_ERROR; return CURLE_SSL_CONNECT_ERROR;
} }
/* new profile with RSA min key len = 1024 ... */
mbedtls_ssl_conf_cert_profile( &connssl->config,
&mbedtls_x509_crt_profile_fr);
switch(data->set.ssl.version) { switch(data->set.ssl.version) {
case CURL_SSLVERSION_SSLv3: case CURL_SSLVERSION_SSLv3:
mbedtls_ssl_conf_min_version(&connssl->config, MBEDTLS_SSL_MAJOR_VERSION_3, mbedtls_ssl_conf_min_version(&connssl->config, MBEDTLS_SSL_MAJOR_VERSION_3,