mirror of
https://github.com/wolfSSL/wolfssl.git
synced 2025-07-30 18:57:27 +02:00
Merge pull request #1892 from dgarske/ecdhe_keysize
Fix for ephemeral key size selection
This commit is contained in:
@ -4021,7 +4021,8 @@ int TLSX_ValidateSupportedCurves(WOLFSSL* ssl, byte first, byte second) {
|
|||||||
defSz = octets;
|
defSz = octets;
|
||||||
}
|
}
|
||||||
|
|
||||||
if (currOid == 0 && ssl->eccTempKeySz <= octets)
|
/* The eccTempKeySz is the preferred ephemeral key size */
|
||||||
|
if (currOid == 0 && ssl->eccTempKeySz == octets)
|
||||||
currOid = oid;
|
currOid = oid;
|
||||||
if ((nextOid == 0 || nextSz > octets) && ssl->eccTempKeySz <= octets) {
|
if ((nextOid == 0 || nextSz > octets) && ssl->eccTempKeySz <= octets) {
|
||||||
nextOid = oid;
|
nextOid = oid;
|
||||||
|
Reference in New Issue
Block a user