feedc0de/wolfssl
1
0
Fork 0
forked from wolfSSL/wolfssl
Code Pull Requests Activity

Fix to make sure the old public DH API's are not enabled unless FIPS v2 or older. Broken in PR #5018.

Browse Source
This commit is contained in:
David Garske
2022-04-26 15:39:54 -07:00
parent a6d019ecf9
commit 67029dc4e7
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
wolfssl/wolfcrypt/settings.h
View File

@ -2027,7 +2027,9 @@ extern void uITRON4_free(void *p) ;
#if !defined(HAVE_PUBLIC_FFDHE) && !defined(NO_DH) && \ #if !defined(HAVE_PUBLIC_FFDHE) && !defined(NO_DH) && \
!defined(WOLFSSL_NO_PUBLIC_FFDHE) && \ !defined(WOLFSSL_NO_PUBLIC_FFDHE) && \
(defined(HAVE_SELFTEST) || FIPS_VERSION_GE(2,0)) (defined(HAVE_SELFTEST) || FIPS_VERSION_LE(2,0))
/* This should only be enabled for FIPS v2 or older. It enables use of the
* older wc_Dh_ffdhe####_Get() API's */
#define HAVE_PUBLIC_FFDHE #define HAVE_PUBLIC_FFDHE
#endif #endif