From: Michael Baentsch <57787676+baentsch@users.noreply.github.com>
Date: Sun, 27 Oct 2024 07:56:11 +0000 (+0100)
Subject: output negotiated TLS1.3 group
X-Git-Tag: openssl-3.5.0-alpha1~959
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=280c1d0f3ed0e3d9043f5e031e2631f5a3f4e636;p=thirdparty%2Fopenssl.git

output negotiated TLS1.3 group

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/25808)
---

diff --git a/apps/lib/s_cb.c b/apps/lib/s_cb.c
index e94c5d61214..3b3c0dd0b38 100644
--- a/apps/lib/s_cb.c
+++ b/apps/lib/s_cb.c
@@ -1326,12 +1326,13 @@ void print_ssl_summary(SSL *s)
     ssl_print_point_formats(bio_err, s);
     if (SSL_is_server(s))
         ssl_print_groups(bio_err, s, 1);
-    else
-        ssl_print_tmp_key(bio_err, s);
-#else
-    if (!SSL_is_server(s))
-        ssl_print_tmp_key(bio_err, s);
 #endif
+    if (!SSL_is_server(s)) {
+        if (SSL_version(s) == TLS1_3_VERSION)
+            BIO_printf(bio_err, "Negotiated TLS1.3 group: %s\n",
+                       SSL_group_to_name(s, SSL_get_negotiated_group(s)));
+        ssl_print_tmp_key(bio_err, s);
+    }
 }
 
 int config_ctx(SSL_CONF_CTX *cctx, STACK_OF(OPENSSL_STRING) *str,