Check the security of DH key shares

ok beck, looks good to jsing

1 files changed, 7 insertions, 1 deletions

diff --git a/src/lib/libssl/ssl_srvr.c b/src/lib/libssl/ssl_srvr.c
index 97077a3380..e37f9cfdb7 100644
--- a/src/lib/libssl/ssl_srvr.c
+++ b/src/lib/libssl/ssl_srvr.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl_srvr.c,v 1.144 2022/06/29 07:53:58 tb Exp $ */
+/* $OpenBSD: ssl_srvr.c,v 1.145 2022/06/29 08:27:51 tb Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -1355,6 +1355,12 @@ ssl3_send_server_kex_dhe(SSL *s, CBB *cbb)
         if (!tls_key_share_public(s->s3->hs.key_share, cbb))
                 goto err;
 
+        if (!tls_key_share_peer_security(s, s->s3->hs.key_share)) {
+                SSLerror(s, SSL_R_DH_KEY_TOO_SMALL);
+                ssl3_send_alert(s, SSL3_AL_FATAL, SSL_AD_HANDSHAKE_FAILURE);
+                return 0;
+        }
+
         return 1;
 
  err: