projects / oweals / openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: cdabf89) | patch
Tolerate a Certificate using a non-supported group on server side
authorMatt Caswell <matt@openssl.org>
Tue, 13 Mar 2018 17:23:10 +0000 (17:23 +0000)
committerMatt Caswell <matt@openssl.org>
Wed, 28 Mar 2018 14:19:22 +0000 (15:19 +0100)
commite9d26dc85238c071117d911704f5f769e79b46a1
tree1f17d902fc208ec41a7f550b7fbd5a7c30ff4df9tree | snapshot
parentcdabf89acf65040560e0242cb70d945f3f3bdd5ccommit | diff
Tolerate a Certificate using a non-supported group on server side

If a server has been configured to use an ECDSA certificate, we should
allow it regardless of whether the server's own supported groups list
includes the certificate's group.

Fixes #2033

Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de>
(Merged from https://github.com/openssl/openssl/pull/5607)
ssl/t1_lib.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.