ITS#5585

diff --git a/CHANGES b/CHANGES
index 77be43d5335899be687c56ee38efd610e739ffcc..325cce44a2203f816fc4e6a3881484f6a2213282 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,7 @@ OpenLDAP 2.4.11 Engineering
        Fixed liblber ber_get_next length decoding (ITS#5580)
        Added libldap assertion control (ITS#5560)
        Fixed libldap GnuTLS CRL result handling (ITS#5577)
+       Fixed libldap GnuTLS SSF computation (ITS#5585)
        Fixed slapd check for structural_class failures (ITS#5540)
        Fixed slapd config backend renumbering (ITS#5571)
        Fixed slapd configContext OID (ITS#5383)

diff --git a/libraries/libldap/tls.c b/libraries/libldap/tls.c
index c966628390e93157fda74ddefbd2e3864d2fb8a9..b042aec9f4f9f4dc5d63f060a881b121f1e7a5ff 100644 (file)
--- a/libraries/libldap/tls.c
+++ b/libraries/libldap/tls.c
@@ -2795,7 +2795,7 @@ ldap_pvt_tls_get_strength( void *s )
        gnutls_cipher_algorithm_t c;
 
        c = gnutls_cipher_get( session->session );
-       return gnutls_cipher_get_key_size( c );
+       return gnutls_cipher_get_key_size( c ) * 8;
 #else
        return 0;
 #endif