diff options
author | Matt Caswell <matt@openssl.org> | 2016-05-27 13:26:03 +0100 |
---|---|---|
committer | Matt Caswell <matt@openssl.org> | 2016-06-01 13:19:02 +0100 |
commit | eeb21772effdd385e44eed547d717f171487987e (patch) | |
tree | 940efbf972cabbe7e1853a578fd3e23df20cade9 /doc/apps | |
parent | b2b361f6afb55c501bedef664c1fdc0d71a91d4b (diff) | |
download | openssl-eeb21772effdd385e44eed547d717f171487987e.tar.gz |
Add dhparam sanity check and update DH_check documentation
The -check argument to dhparam should never identify any problems if we
have just generated the parameters. Add a sanity check for this and print
an error and fail if necessary.
Also updates the documentation for the -check argument, and the DH_check()
function.
RT#4244
Reviewed-by: Richard Levitte <levitte@openssl.org>
Diffstat (limited to 'doc/apps')
-rw-r--r-- | doc/apps/dhparam.pod | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/doc/apps/dhparam.pod b/doc/apps/dhparam.pod index 63cc0d372b..addd88a540 100644 --- a/doc/apps/dhparam.pod +++ b/doc/apps/dhparam.pod @@ -72,7 +72,8 @@ avoid small-subgroup attacks that may be possible otherwise. =item B<-check> -check if the parameters are valid primes and generator. +Performs numerous checks to see if the supplied parameters are valid and +displays a warning if not. =item B<-2>, B<-5> |