From 730c95cf38c3e9768bef0b518c51bbcc32833504 Mon Sep 17 00:00:00 2001 From: David Garske Date: Tue, 3 Mar 2020 09:20:58 -0800 Subject: [PATCH] Fix for TLS server incorrectly showing "FFDHE_2048" for "SSL curve name is" when using ECDHE and TLS v1.2 or less. The `PickHashSigAlgo` should be resetting `ssl->namedGroup` to indicate a named group was not used. --- src/internal.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/internal.c b/src/internal.c index d73a881c7..b08d06dd7 100644 --- a/src/internal.c +++ b/src/internal.c @@ -18915,6 +18915,7 @@ int PickHashSigAlgo(WOLFSSL* ssl, const byte* hashSigAlgo, word32 hashSigAlgoSz) /* mark as highest and check remainder of hashSigAlgo list */ ssl->suites->hashAlgo = hashAlgo; ssl->suites->sigAlgo = sigAlgo; + ssl->namedGroup = 0; ret = 0; } else @@ -18955,6 +18956,7 @@ int PickHashSigAlgo(WOLFSSL* ssl, const byte* hashSigAlgo, word32 hashSigAlgoSz) /* mark as highest and check remainder of hashSigAlgo list */ ssl->suites->hashAlgo = hashAlgo; ssl->suites->sigAlgo = sigAlgo; + ssl->namedGroup = 0; break; default: continue;