Bug 1290037 - Update keybits in H2, r=mt

MozReview-Commit-ID: 35oWoDMqe1Y

--HG--
extra : rebase_source : 020fbd93c190131eb04eed2d583787d6e5954a5a
This commit is contained in:
Franziskus Kiefer 2016-07-28 16:48:00 +02:00
parent 30cadf6976
commit 7943c27406

View File

@ -3549,8 +3549,8 @@ Http2Session::ConfirmTLSProfile()
LOG3(("Http2Session::ConfirmTLSProfile %p FAILED due to DH %d < 2048\n",
this, keybits));
RETURN_SESSION_ERROR(this, INADEQUATE_SECURITY);
} else if (kea == ssl_kea_ecdh && keybits < 256) { // 256 bits is "security level" of 128
LOG3(("Http2Session::ConfirmTLSProfile %p FAILED due to ECDH %d < 256\n",
} else if (kea == ssl_kea_ecdh && keybits < 224) { // see rfc7540 9.2.1.
LOG3(("Http2Session::ConfirmTLSProfile %p FAILED due to ECDH %d < 224\n",
this, keybits));
RETURN_SESSION_ERROR(this, INADEQUATE_SECURITY);
}