50910ac Ticket 48798 - Enable DS to offer weaker DH params in NSS

Authored and Committed by William Brown 3 years ago
    Ticket 48798 - Enable DS to offer weaker DH params in NSS
    
    Bug Description:  Java is unable to handle DH param's greater than 1024 bit.
    As of NSS 2.20 and higher, nss defaults to params of 2048 bit. This breaks
    all java clients.
    
    Fix Description:  This adds a new option, allowWeakDHParams that allows
    nss to generate and use insecure DH params that Java would be capable of
    using.
    
    This test case shows the ability to allow weak params, and
    that they are indeed 1024 bits
    
    https://fedorahosted.org/389/ticket/48798
    
    Author: wibrown
    
    Review by: nhosoi
    
        
file modified
+2 -1
file modified
+73 -0
file modified
+7 -1