summaryrefslogtreecommitdiff
path: root/lib/gnutls_priority.c
diff options
context:
space:
mode:
authorNikos Mavrogiannopoulos <nmav@gnutls.org>2014-04-08 00:08:56 +0200
committerNikos Mavrogiannopoulos <nmav@gnutls.org>2014-04-08 00:08:56 +0200
commita078a627f03837aebb4bf630786faed9b248ac18 (patch)
tree7ddd25de30b9115d482c7f9168a4822678498cfe /lib/gnutls_priority.c
parent38645c9e93136d2dd0612b4ad77f628c6114eac3 (diff)
downloadgnutls-a078a627f03837aebb4bf630786faed9b248ac18.tar.gz
modify to conform to the documentated level.
Diffstat (limited to 'lib/gnutls_priority.c')
-rw-r--r--lib/gnutls_priority.c8
1 files changed, 4 insertions, 4 deletions
diff --git a/lib/gnutls_priority.c b/lib/gnutls_priority.c
index 7a85c6ea3c..bfda106c2a 100644
--- a/lib/gnutls_priority.c
+++ b/lib/gnutls_priority.c
@@ -674,8 +674,8 @@ int check_level(const char *level, gnutls_priority_t priority_cache,
func(&priority_cache->sign_algo, sign_priority_default);
func(&priority_cache->supported_ecc, supported_ecc_normal);
- SET_PROFILE(GNUTLS_PROFILE_LOW);
- SET_LEVEL(GNUTLS_SEC_PARAM_LOW);
+ SET_PROFILE(GNUTLS_PROFILE_LOW); /* set certificate level */
+ SET_LEVEL(GNUTLS_SEC_PARAM_WEAK); /* set DH params level */
return 1;
} else if (strcasecmp(level, LEVEL_NORMAL) == 0) {
func(&priority_cache->cipher, cipher_priority_normal);
@@ -685,7 +685,7 @@ int check_level(const char *level, gnutls_priority_t priority_cache,
func(&priority_cache->supported_ecc, supported_ecc_normal);
SET_PROFILE(GNUTLS_PROFILE_LOW);
- SET_LEVEL(GNUTLS_SEC_PARAM_LOW);
+ SET_LEVEL(GNUTLS_SEC_PARAM_WEAK);
return 1;
} else if (strcasecmp(level, LEVEL_PFS) == 0) {
func(&priority_cache->cipher, cipher_priority_normal);
@@ -695,7 +695,7 @@ int check_level(const char *level, gnutls_priority_t priority_cache,
func(&priority_cache->supported_ecc, supported_ecc_normal);
SET_PROFILE(GNUTLS_PROFILE_LOW);
- SET_LEVEL(GNUTLS_SEC_PARAM_LOW);
+ SET_LEVEL(GNUTLS_SEC_PARAM_WEAK);
return 1;
} else if (strcasecmp(level, LEVEL_SECURE256) == 0
|| strcasecmp(level, LEVEL_SECURE192) == 0) {