ITS#5585

CHANGES

@@ -4,6 +4,7 @@ OpenLDAP 2.4.11 Engineering
 	Fixed liblber ber_get_next length decoding (ITS#5580)
 	Added libldap assertion control (ITS#5560)
 	Fixed libldap GnuTLS CRL result handling (ITS#5577)
+	Fixed libldap GnuTLS SSF computation (ITS#5585)
 	Fixed slapd check for structural_class failures (ITS#5540)
 	Fixed slapd config backend renumbering (ITS#5571)
 	Fixed slapd configContext OID (ITS#5383)

libraries/libldap/tls.c

@@ -2795,7 +2795,7 @@ ldap_pvt_tls_get_strength( void *s )
 	gnutls_cipher_algorithm_t c;
 
 	c = gnutls_cipher_get( session->session );
-	return gnutls_cipher_get_key_size( c );
+	return gnutls_cipher_get_key_size( c ) * 8;
 #else
 	return 0;
 #endif