Fix for TLS sniffer with non-standard curves. If curve not provided in key share data, then use private key curve. ZD 11128.

2020-10-16 16:10:27 -07:00
parent 9793414d78
commit 85b4170047
1 changed files with 5 additions and 0 deletions
--- a/src/sniffer.c
+++ b/src/sniffer.c
@@ -2276,6 +2276,11 @@ static int SetupKeys(const byte* input, int* sslBytes, SnifferSession* session,
                SetError(PARTIAL_INPUT_STR, error, session, FATAL_ERROR_STATE);
                ret = -1;
            }
+
+            /* if curve not provided in key share data, then use private key curve */
+            if (useEccCurveId == ECC_CURVE_DEF && key.dp) {
+                useEccCurveId = key.dp->id;
+            }
        }

        if (ret == 0) {