diff options
| author | Andreas Steffen <andreas.steffen@strongswan.org> | 2009-07-06 11:47:38 +0200 |
|---|---|---|
| committer | Andreas Steffen <andreas.steffen@strongswan.org> | 2009-07-06 11:47:38 +0200 |
| commit | eebecebead5cdf1d4fc38ed47a7d3be1574ed54a (patch) | |
| tree | 0ed38fd6dbff89d5e5f171c707a807feeaccdf8a | |
| parent | 21863d63617371e7bc5da8033eea99158471e93a (diff) | |
| download | strongswan-eebecebead5cdf1d4fc38ed47a7d3be1574ed54a.tar.bz2 strongswan-eebecebead5cdf1d4fc38ed47a7d3be1574ed54a.tar.xz | |
make ecp_x_coordinate_only = yes the default
| -rw-r--r-- | src/libstrongswan/plugins/openssl/openssl_ec_diffie_hellman.c | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/src/libstrongswan/plugins/openssl/openssl_ec_diffie_hellman.c b/src/libstrongswan/plugins/openssl/openssl_ec_diffie_hellman.c index 4c5d3f294..082aed9ca 100644 --- a/src/libstrongswan/plugins/openssl/openssl_ec_diffie_hellman.c +++ b/src/libstrongswan/plugins/openssl/openssl_ec_diffie_hellman.c @@ -185,10 +185,12 @@ static bool compute_shared_key(private_openssl_ec_diffie_hellman_t *this, chunk_ } /* - * x_coordinate_only = TRUE applies errata for RFC 4753 + * The default setting ecp_x_coordinate_only = TRUE + * applies the following errata for RFC 4753: + * http://www.rfc-editor.org/errata_search.php?eid=9 */ x_coordinate_only = lib->settings->get_bool(lib->settings, - "libstrongswan.ecp_x_coordinate_only", FALSE); + "libstrongswan.ecp_x_coordinate_only", TRUE); if (!ecp2chunk(this->ec_group, secret, shared_secret, x_coordinate_only)) { goto error; |