Commit 13be69f3 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Check for kECDH with extensions. 



Reviewed-by: default avatarMatt Caswell <matt@openssl.org>
parent 526f94ad

ssl/t1_lib.c

+1 −1
Original line number Diff line number Diff line
@@ -1157,7 +1157,7 @@ unsigned char *ssl_add_clienthello_tlsext(SSL *s, unsigned char *buf, 


            alg_k = c->algorithm_mkey;

            alg_a = c->algorithm_auth;

            if ((alg_k & (SSL_kECDHE | SSL_kECDHr | SSL_kECDHe)

            if ((alg_k & (SSL_kECDHE | SSL_kECDHr | SSL_kECDHe | SSL_kECDHEPSK)

                 || (alg_a & SSL_aECDSA))) {

                using_ecc = 1;

                break;