]> git.ipfire.org Git - thirdparty/curl.git/commitdiff
mbedtls: enable use of EC keys
authorGuy Poizat <Guy.Poizat@non.se.com>
Thu, 16 May 2019 09:54:26 +0000 (11:54 +0200)
committerDaniel Stenberg <daniel@haxx.se>
Mon, 20 May 2019 17:00:59 +0000 (19:00 +0200)
Closes #3892

lib/vtls/mbedtls.c

index ab357dd87af43ca59dce73521cc81f26a9054396..63d1f4c81b921e1d5d69ec0f2c571c3d0d351059 100644 (file)
@@ -343,7 +343,8 @@ mbed_connect_step1(struct connectdata *conn,
   if(SSL_SET_OPTION(key)) {
     ret = mbedtls_pk_parse_keyfile(&BACKEND->pk, SSL_SET_OPTION(key),
                                    SSL_SET_OPTION(key_passwd));
-    if(ret == 0 && !mbedtls_pk_can_do(&BACKEND->pk, MBEDTLS_PK_RSA))
+    if(ret == 0 && !(mbedtls_pk_can_do(&BACKEND->pk, MBEDTLS_PK_RSA) ||
+                     mbedtls_pk_can_do(&BACKEND->pk, MBEDTLS_PK_ECKEY)))
       ret = MBEDTLS_ERR_PK_TYPE_MISMATCH;
 
     if(ret) {