]> git.ipfire.org Git - thirdparty/strongswan.git/commit
tls-server: Also change DH group when selecting a different EC curve
authorTobias Brunner <tobias@strongswan.org>
Thu, 5 Oct 2023 08:27:18 +0000 (10:27 +0200)
committerTobias Brunner <tobias@strongswan.org>
Mon, 6 Nov 2023 10:00:51 +0000 (11:00 +0100)
commitb5e4bf4b6c2d5a3ac46cce78d69673c224256206
tree7bbd7d12a2d016d0170173adcb0a242be2249f74
parent595fa077b63c4cbea292fdb4a05606b65cf4f8c1
tls-server: Also change DH group when selecting a different EC curve

If we initially selected a group the peer doesn't support (e.g. because
curve25519 is the first ECDH group provided by plugins), then found
a supported curve, we previously still instantiated a DH object for the
original group and might have formatted the parameters incorrectly.
src/libtls/tls_server.c