NID_hash and NID_ec_curver were interchanged

diff --git a/src/libstrongswan/plugins/openssl/openssl_ec_public_key.c b/src/libstrongswan/plugins/openssl/openssl_ec_public_key.c
index f4ad4e70867408dc72c5c8348f9dd8aa6b80fef6..f5631b3b8573a4690a5caf0480ebe25ce3541e88 100644 (file)
--- a/src/libstrongswan/plugins/openssl/openssl_ec_public_key.c
+++ b/src/libstrongswan/plugins/openssl/openssl_ec_public_key.c
@@ -153,14 +153,14 @@ static bool verify(private_openssl_ec_public_key_t *this,
                case SIGN_ECDSA_WITH_NULL:
                        return verify_signature(this, data, signature);
                case SIGN_ECDSA_256:
-                       return verify_curve_signature(this, scheme, NID_X9_62_prime256v1,
-                                                                                 NID_sha256, data, signature);
+                       return verify_curve_signature(this, scheme, NID_sha256,
+                                                                                 NID_X9_62_prime256v1, data, signature);
                case SIGN_ECDSA_384:
-                       return verify_curve_signature(this, scheme, NID_secp384r1,
-                                                                                 NID_sha384, data, signature);
+                       return verify_curve_signature(this, scheme, NID_sha384,
+                                                                                 NID_secp384r1, data, signature);
                case SIGN_ECDSA_521:
-                       return verify_curve_signature(this, scheme, NID_secp521r1,
-                                                                                 NID_sha512, data, signature);
+                       return verify_curve_signature(this, scheme, NID_sha512,
+                                                                                 NID_secp521r1, data, signature);
                default:
                        DBG1("signature scheme %N not supported in EC",
                                 signature_scheme_names, scheme);