forked from wolfSSL/wolfssl
Merge pull request #1892 from dgarske/ecdhe_keysize
Fix for ephemeral key size selection
This commit is contained in:
@ -4021,7 +4021,8 @@ int TLSX_ValidateSupportedCurves(WOLFSSL* ssl, byte first, byte second) {
|
||||
defSz = octets;
|
||||
}
|
||||
|
||||
if (currOid == 0 && ssl->eccTempKeySz <= octets)
|
||||
/* The eccTempKeySz is the preferred ephemeral key size */
|
||||
if (currOid == 0 && ssl->eccTempKeySz == octets)
|
||||
currOid = oid;
|
||||
if ((nextOid == 0 || nextSz > octets) && ssl->eccTempKeySz <= octets) {
|
||||
nextOid = oid;
|
||||
|
Reference in New Issue
Block a user