Skip to content

Commit

Permalink
DH_check: Emphasize the importance of return value check
Browse files Browse the repository at this point in the history
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from #22262)

(cherry picked from commit f7b8013)
  • Loading branch information
t8m committed Oct 5, 2023
1 parent fdfc1de commit 65f206d
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions doc/man3/DH_generate_parameters.pod
Original file line number Diff line number Diff line change
Expand Up @@ -128,6 +128,10 @@ The parameter B<j> is invalid.

=back

If 0 is returned or B<*codes> is set to a nonzero value the supplied
parameters should not be used for Diffie-Hellman operations otherwise
the security properties of the key exchange are not guaranteed.

DH_check_ex(), DH_check_params() and DH_check_pub_key_ex() are similar to
DH_check() and DH_check_params() respectively, but the error reasons are added
to the thread's error queue instead of provided as return values from the
Expand Down

0 comments on commit 65f206d

Please sign in to comment.