From: Guy Poizat <Guy.Poizat@non.se.com>
Date: Thu, 16 May 2019 09:54:26 +0000 (+0200)
Subject: mbedtls: enable use of EC keys
X-Git-Tag: curl-7_65_0~8
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=0da8441298569dfd714e7b21f74aab373b95d2f7;p=thirdparty%2Fcurl.git

mbedtls: enable use of EC keys

Closes #3892
---

diff --git a/lib/vtls/mbedtls.c b/lib/vtls/mbedtls.c
index ab357dd87a..63d1f4c81b 100644
--- a/lib/vtls/mbedtls.c
+++ b/lib/vtls/mbedtls.c
@@ -343,7 +343,8 @@ mbed_connect_step1(struct connectdata *conn,
   if(SSL_SET_OPTION(key)) {
     ret = mbedtls_pk_parse_keyfile(&BACKEND->pk, SSL_SET_OPTION(key),
                                    SSL_SET_OPTION(key_passwd));
-    if(ret == 0 && !mbedtls_pk_can_do(&BACKEND->pk, MBEDTLS_PK_RSA))
+    if(ret == 0 && !(mbedtls_pk_can_do(&BACKEND->pk, MBEDTLS_PK_RSA) ||
+                     mbedtls_pk_can_do(&BACKEND->pk, MBEDTLS_PK_ECKEY)))
       ret = MBEDTLS_ERR_PK_TYPE_MISMATCH;
 
     if(ret) {