Merge pull request #1892 from dgarske/ecdhe_keysize

Fix for ephemeral key size selection
This commit is contained in:
toddouska
2018-10-25 07:27:20 -07:00
committed by GitHub

View File

@ -4021,7 +4021,8 @@ int TLSX_ValidateSupportedCurves(WOLFSSL* ssl, byte first, byte second) {
defSz = octets; defSz = octets;
} }
if (currOid == 0 && ssl->eccTempKeySz <= octets) /* The eccTempKeySz is the preferred ephemeral key size */
if (currOid == 0 && ssl->eccTempKeySz == octets)
currOid = oid; currOid = oid;
if ((nextOid == 0 || nextSz > octets) && ssl->eccTempKeySz <= octets) { if ((nextOid == 0 || nextSz > octets) && ssl->eccTempKeySz <= octets) {
nextOid = oid; nextOid = oid;