feedc0de/wolfssl
1
0
Fork 0
forked from wolfSSL/wolfssl
Code Pull Requests Activity

Merge pull request #2604 from SparkiDev/disabled_curve_fix

Browse Source 
TLS supported curve extension - validate support fix
This commit is contained in:
toddouska
2019-11-20 09:17:50 -08:00
committed by GitHub
parent ccc8a49fcb c7f7d1b193
commit 2a7fb69523
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/tls.c
View File

@ -4268,6 +4268,10 @@ int TLSX_ValidateSupportedCurves(WOLFSSL* ssl, byte first, byte second) {
curve = curve->next) { curve = curve->next) {
#ifdef OPENSSL_EXTRA #ifdef OPENSSL_EXTRA
/* skip if name is not in supported ECC range */
if (curve->name > WOLFSSL_ECC_X25519)
continue;
/* skip if curve is disabled by user */
if (ssl->ctx->disabledCurves & (1 << curve->name)) if (ssl->ctx->disabledCurves & (1 << curve->name))
continue; continue;
#endif #endif