ssl: gnutls: bump dh bitsize to 2048

[ngircd-alex.git] / src / ngircd / conn-ssl.c

diff --git a/src/ngircd/conn-ssl.c b/src/ngircd/conn-ssl.c
index 6a0404f9e052e6b5e463505d711d3a95f1f48f8e..7630420dad36bfa46e2dbb0590e382055f3d7979 100644 (file)
--- a/src/ngircd/conn-ssl.c
+++ b/src/ngircd/conn-ssl.c
@@ -1,11 +1,15 @@
 /*
  * ngIRCd -- The Next Generation IRC Daemon
 /*
  * ngIRCd -- The Next Generation IRC Daemon

- *
- * SSL wrapper functions.

  * Copyright (c) 2005-2008 Florian Westphal <fw@strlen.de>
  */
 
 #include "portab.h"
  * Copyright (c) 2005-2008 Florian Westphal <fw@strlen.de>
  */
 
 #include "portab.h"

+
+/**
+ * @file
+ * SSL wrapper functions
+ */
+

 #include "imp.h"
 #include "conf-ssl.h"
 
 #include "imp.h"
 #include "conf-ssl.h"
 


@@ -47,7 +51,7 @@ static bool ConnSSL_LoadServerKey_openssl PARAMS(( SSL_CTX *c ));
 #include <unistd.h>
 #include <gnutls/x509.h>
 
 #include <unistd.h>
 #include <gnutls/x509.h>
 

-#define DH_BITS 1024
+#define DH_BITS 2048

 static gnutls_certificate_credentials_t x509_cred;
 static gnutls_dh_params_t dh_params;
 
 static gnutls_certificate_credentials_t x509_cred;
 static gnutls_dh_params_t dh_params;