schannel: support CALG_ECDH_EPHEM algorithm

Add support for Ephemeral elliptic curve Diffie-Hellman key exchange
algorithm option when selecting ciphers. This became available on the
Win10 SDK.

Closes https://github.com/curl/curl/pull/3608

diff --git a/docs/CIPHERS.md b/docs/CIPHERS.md
index 0d3be3b56c0f1fc3eada23d774a1463f908becd6..c011804267fcba00741a842bec610a8b7b313a8a 100644 (file)
--- a/docs/CIPHERS.md
+++ b/docs/CIPHERS.md
@@ -496,3 +496,4 @@ WinSSL allows the enabling and disabling of encryption algorithms, but not speci
 `CALG_ECDH`,
 `CALG_ECMQV`,
 `CALG_ECDSA`,
+`CALG_ECDH_EPHEM`,

diff --git a/lib/vtls/schannel.c b/lib/vtls/schannel.c
index 6f55b3b8feec284879bc3004f15184dd8c3dbc37..36e68f96950c7e98231e24abf89903638575bd69 100644 (file)
--- a/lib/vtls/schannel.c
+++ b/lib/vtls/schannel.c
@@ -323,6 +323,9 @@ get_alg_id_by_name(char *name)
 #endif
 #ifdef CALG_ECDSA
   CIPHEROPTION(CALG_ECDSA);
+#endif
+#ifdef CALG_ECDH_EPHEM
+  CIPHEROPTION(CALG_ECDH_EPHEM);
 #endif
   return 0;
 }