From b38cc90f5b38138687263f574a408e17c1f7b2d6 Mon Sep 17 00:00:00 2001 From: Anton Date: Sun, 29 Jul 2018 01:00:46 +0400 Subject: moved common peer certificate verification code into new func verify_peer_cert_common(); added check for min RSA key size --- PICA_security.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'PICA_security.h') diff --git a/PICA_security.h b/PICA_security.h index 0ea3306..c928adb 100644 --- a/PICA_security.h +++ b/PICA_security.h @@ -21,7 +21,7 @@ /* Important security parameters grouped together */ -#define PICA_RSA_KEYSIZE 4096 +#define PICA_RSA_MINKEYSIZE 4096 #define PICA_TLS_CIPHERLIST "DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CAMELLIA256-SHA" #define PICA_OPENSSL_SECURUTY_LEVEL 3 #define PICA_CERTDIGESTALGO "-sha256" -- cgit v1.2.1