From: Aki Tuomi Date: Wed, 27 Nov 2024 12:15:00 +0000 (+0200) Subject: lib-ssl-iostream: Use constants for extension id's X-Git-Tag: 2.4.1~489 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=66e41ed85e43c1f5a53c2365a92165d37ac1aeff;p=thirdparty%2Fdovecot%2Fcore.git lib-ssl-iostream: Use constants for extension id's --- diff --git a/src/lib-ssl-iostream/iostream-openssl-context.c b/src/lib-ssl-iostream/iostream-openssl-context.c index e53ea17c1c..b97f572e14 100644 --- a/src/lib-ssl-iostream/iostream-openssl-context.c +++ b/src/lib-ssl-iostream/iostream-openssl-context.c @@ -494,7 +494,8 @@ static int ssl_clienthello_callback(SSL *ssl, int *al, size_t extlen; /* Process extension 10 - groups */ - if (SSL_client_hello_get0_ext(ssl, 10, &ext, &extlen) == 1 && + if (SSL_client_hello_get0_ext(ssl, TLSEXT_TYPE_supported_groups, + &ext, &extlen) == 1 && extlen > 0) { bool first = TRUE; unsigned short veclen = be16_to_cpu_unaligned(ext); @@ -515,7 +516,8 @@ static int ssl_clienthello_callback(SSL *ssl, int *al, /* Process extension 11 - ec point formats */ ext = NULL; - if (SSL_client_hello_get0_ext(ssl, 11, &ext, &extlen) == 1 && + if (SSL_client_hello_get0_ext(ssl, TLSEXT_TYPE_ec_point_formats, + &ext, &extlen) == 1 && extlen > 0 && extlen == ext[0]+1U) { for (size_t i = 1; i < extlen; i++) { if (i > 1)