diff options
Diffstat (limited to 'src/lib/libssl/t1_lib.c')
| -rw-r--r-- | src/lib/libssl/t1_lib.c | 10 |
1 files changed, 4 insertions, 6 deletions
diff --git a/src/lib/libssl/t1_lib.c b/src/lib/libssl/t1_lib.c index 257cd0bd07..e7dbe9cd99 100644 --- a/src/lib/libssl/t1_lib.c +++ b/src/lib/libssl/t1_lib.c | |||
| @@ -1,4 +1,4 @@ | |||
| 1 | /* $OpenBSD: t1_lib.c,v 1.92 2016/10/02 21:18:08 guenther Exp $ */ | 1 | /* $OpenBSD: t1_lib.c,v 1.93 2016/10/19 16:38:40 jsing Exp $ */ |
| 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) |
| 3 | * All rights reserved. | 3 | * All rights reserved. |
| 4 | * | 4 | * |
| @@ -651,8 +651,7 @@ ssl_add_clienthello_tlsext(SSL *s, unsigned char *p, unsigned char *limit) | |||
| 651 | alg_k = c->algorithm_mkey; | 651 | alg_k = c->algorithm_mkey; |
| 652 | alg_a = c->algorithm_auth; | 652 | alg_a = c->algorithm_auth; |
| 653 | 653 | ||
| 654 | if ((alg_k & (SSL_kECDHE|SSL_kECDHr|SSL_kECDHe) || | 654 | if ((alg_k & SSL_kECDHE) || (alg_a & SSL_aECDSA)) { |
| 655 | (alg_a & SSL_aECDSA))) { | ||
| 656 | using_ecc = 1; | 655 | using_ecc = 1; |
| 657 | break; | 656 | break; |
| 658 | } | 657 | } |
| @@ -964,8 +963,7 @@ ssl_add_serverhello_tlsext(SSL *s, unsigned char *p, unsigned char *limit) | |||
| 964 | 963 | ||
| 965 | alg_a = s->s3->tmp.new_cipher->algorithm_auth; | 964 | alg_a = s->s3->tmp.new_cipher->algorithm_auth; |
| 966 | alg_k = s->s3->tmp.new_cipher->algorithm_mkey; | 965 | alg_k = s->s3->tmp.new_cipher->algorithm_mkey; |
| 967 | using_ecc = (alg_k & (SSL_kECDHE|SSL_kECDHr|SSL_kECDHe) || | 966 | using_ecc = ((alg_k & SSL_kECDHE) || (alg_a & SSL_aECDSA)) && |
| 968 | alg_a & SSL_aECDSA) && | ||
| 969 | s->session->tlsext_ecpointformatlist != NULL; | 967 | s->session->tlsext_ecpointformatlist != NULL; |
| 970 | 968 | ||
| 971 | ret += 2; | 969 | ret += 2; |
| @@ -1959,7 +1957,7 @@ ssl_check_serverhello_tlsext(SSL *s) | |||
| 1959 | (s->tlsext_ecpointformatlist_length > 0) && | 1957 | (s->tlsext_ecpointformatlist_length > 0) && |
| 1960 | (s->session->tlsext_ecpointformatlist != NULL) && | 1958 | (s->session->tlsext_ecpointformatlist != NULL) && |
| 1961 | (s->session->tlsext_ecpointformatlist_length > 0) && | 1959 | (s->session->tlsext_ecpointformatlist_length > 0) && |
| 1962 | ((alg_k & (SSL_kECDHE|SSL_kECDHr|SSL_kECDHe)) || (alg_a & SSL_aECDSA))) { | 1960 | ((alg_k & SSL_kECDHE) || (alg_a & SSL_aECDSA))) { |
| 1963 | /* we are using an ECC cipher */ | 1961 | /* we are using an ECC cipher */ |
| 1964 | size_t i; | 1962 | size_t i; |
| 1965 | unsigned char *list; | 1963 | unsigned char *list; |
