[Date Prev][Date Next] [Chronological] [Thread] [Top]

(ITS#5585) GnuTLS SSF strength conversion issue

Full_Name: Quanah Gibson-Mount
Version: 2.4.10/HEAD
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (

When using GnuTLS rather than OpenSSL for OpenLDAP, the SSF reported when using
startTLS is incorrect.  This is because GnuTLS reports the strength in bytes,
while the OpenLDAP code expects the strength in bits.  Code needs to be updated
to adjust the SSF value when linked against GnuTLS to our expected result.