commit 11f740aae4221f000da5363c33805be60dc70721
author Hanno Becker <hanno.becker@arm.com> Fri Oct 13 16:56:15 2017 +0100
committer Hanno Becker <hanno.becker@arm.com> Fri Oct 13 16:56:15 2017 +0100
tree dede53b12cce4d2d26228e5a181b2d90d2dcebff
parent a75a4591430919a6eb3d430aca396044fe3816d4

Use 2048-bit DHE parameters from RFC 3526 instead of 5114 by default

The parameters from RFC 5114 are not considered trustworthy, while those from
RFC 3526 have been generated in a nothing-up-my-sleeve manner.

tests/ssl-opt.sh

diff --git a/tests/ssl-opt.sh b/tests/ssl-opt.sh
index ed695cb..d759752 100755
--- a/tests/ssl-opt.sh
+++ b/tests/ssl-opt.sh
@@ -2269,7 +2269,7 @@
                     debug_level=3" \
             0 \
             -c "value of 'DHM: P ' (2048 bits)" \
-            -c "value of 'DHM: G ' (2048 bits)"
+            -c "value of 'DHM: G ' (2 bits)"
 
 run_test    "DHM parameters: other parameters" \
             "$P_SRV dhm_file=data_files/dhparams.pem" \