wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2025-08-02 20:24:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

Revert PR #8911. For TLS v1.2 RSA only is only supported with WOLFSSL_STATIC_RSA. For TLS v1.3 RSA only is not supported (must be PFS).

Browse Source
This commit is contained in:
David Garske
2025-06-23 14:36:35 -07:00
parent 978a29da0b
commit bfebeae533
2 changed files with 5 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/internal.c
View File

@@ -19621,8 +19621,8 @@ static WC_INLINE int EncryptDo(WOLFSSL* ssl, byte* out, const byte* input,
#endif #endif
(void)out; (void)out;
(void)input;
(void)sz; (void)sz;
(void)type;
if (input == NULL) { if (input == NULL) {
return BAD_FUNC_ARG; return BAD_FUNC_ARG;
@@ -19699,8 +19699,8 @@ static WC_INLINE int EncryptDo(WOLFSSL* ssl, byte* out, const byte* input,
additionalSz = writeAeadAuthData(ssl, additionalSz = writeAeadAuthData(ssl,
/* Length of the plain text minus the explicit /* Length of the plain text minus the explicit
* IV length minus the authentication tag size. */ * IV length minus the authentication tag size. */
sz - (word16)(AESGCM_EXP_IV_SZ) - ssl->specs.aead_mac_size, type, sz - (word16)(AESGCM_EXP_IV_SZ) - ssl->specs.aead_mac_size,
ssl->encrypt.additional, 0, NULL, CUR_ORDER); type, ssl->encrypt.additional, 0, NULL, CUR_ORDER);
if (additionalSz < 0) { if (additionalSz < 0) {
ret = additionalSz; ret = additionalSz;
break; break;

6
src/ssl.c
View File

@@ -48,11 +48,9 @@
#if !defined(WOLFSSL_ALLOW_NO_SUITES) && !defined(WOLFCRYPT_ONLY) #if !defined(WOLFSSL_ALLOW_NO_SUITES) && !defined(WOLFCRYPT_ONLY)
#if defined(NO_DH) && !defined(HAVE_ECC) && !defined(WOLFSSL_STATIC_RSA) \ #if defined(NO_DH) && !defined(HAVE_ECC) && !defined(WOLFSSL_STATIC_RSA) \
&& !defined(WOLFSSL_STATIC_DH) && !defined(WOLFSSL_STATIC_PSK) \ && !defined(WOLFSSL_STATIC_DH) && !defined(WOLFSSL_STATIC_PSK) \
&& !defined(HAVE_CURVE25519) && !defined(HAVE_CURVE448) \ && !defined(HAVE_CURVE25519) && !defined(HAVE_CURVE448)
&& defined(NO_RSA)
#error "No cipher suites defined because DH disabled, ECC disabled, " \ #error "No cipher suites defined because DH disabled, ECC disabled, " \
"RSA disabled and no static suites defined. " \ "and no static suites defined. Please see top of README"
"Please see top of README"
#endif #endif
#ifdef WOLFSSL_CERT_GEN #ifdef WOLFSSL_CERT_GEN
/* need access to Cert struct for creating certificate */ /* need access to Cert struct for creating certificate */