From Ivan Sy:

Add a more descriptive log message on DH key exchange.

svn path=/trunk/; revision=29825
This commit is contained in:
Jaap Keuter 2009-09-09 19:09:57 +00:00
parent 0fb1a3eca3
commit 564eff837f
1 changed files with 7 additions and 3 deletions

View File

@ -1801,10 +1801,14 @@ ssl_decrypt_pre_master_secret(SslDecryptSession*ssl_session,
{
gint i;
if(ssl_session->cipher_suite.kex!=KEX_RSA) {
ssl_debug_printf("ssl_decrypt_pre_master_secret key %d different from KEX_RSA(%d)\n",
if(ssl_session->cipher_suite.kex == KEX_DH) {
ssl_debug_printf("ssl_decrypt_pre_master_secret session uses DH (%d) key exchange, which is impossible to decrypt\n",
KEX_DH);
return -1;
} else if(ssl_session->cipher_suite.kex != KEX_RSA) {
ssl_debug_printf("ssl_decrypt_pre_master_secret key exchange %d different from KEX_RSA (%d)\n",
ssl_session->cipher_suite.kex, KEX_RSA);
return(-1);
return -1;
}
/* with tls key loading will fail if not rsa type, so no need to check*/