Merge pull request #1892 from dgarske/ecdhe_keysize

Fix for ephemeral key size selection
This commit is contained in:
toddouska
2018-10-25 07:27:20 -07:00
committed by GitHub

View File

@ -4021,7 +4021,8 @@ int TLSX_ValidateSupportedCurves(WOLFSSL* ssl, byte first, byte second) {
defSz = octets;
}
if (currOid == 0 && ssl->eccTempKeySz <= octets)
/* The eccTempKeySz is the preferred ephemeral key size */
if (currOid == 0 && ssl->eccTempKeySz == octets)
currOid = oid;
if ((nextOid == 0 || nextSz > octets) && ssl->eccTempKeySz <= octets) {
nextOid = oid;