mirror/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-03-16 13:20:51 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

ssl_write_supported_groups_ext(): add support for ffdh keys

Browse Source 
Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>
This commit is contained in:
Przemek Stekiel 2023-05-18 14:10:02 +02:00
parent 383f471bf4
commit 060012c5fd
1 changed files with 33 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

34
library/ssl_client.c
View File

@ -274,8 +274,40 @@ static int ssl_write_supported_groups_ext(mbedtls_ssl_context *ssl,
*group_list));
}
#endif /* MBEDTLS_ECP_LIGHT */
/* Add DHE groups here */
if ((mbedtls_ssl_conf_is_tls13_enabled(ssl->conf) &&
mbedtls_ssl_tls13_named_group_is_dhe(*group_list))) {
const char *ffdh_group = NULL;
switch (*group_list) {
case MBEDTLS_SSL_IANA_TLS_GROUP_FFDHE2048:
ffdh_group = "ffdhe2048";
break;
case MBEDTLS_SSL_IANA_TLS_GROUP_FFDHE3072:
ffdh_group = "ffdhe3072";
break;
case MBEDTLS_SSL_IANA_TLS_GROUP_FFDHE4096:
ffdh_group = "ffdhe4096";
break;
case MBEDTLS_SSL_IANA_TLS_GROUP_FFDHE6144:
ffdh_group = "ffdhe6144";
break;
case MBEDTLS_SSL_IANA_TLS_GROUP_FFDHE8192:
ffdh_group = "ffdhe8192";
break;
default:
break;
}
if (ffdh_group == NULL) {
continue;
}
MBEDTLS_SSL_CHK_BUF_PTR(p, end, 2);
MBEDTLS_PUT_UINT16_BE(*group_list, p, 0);
p += 2;
MBEDTLS_SSL_DEBUG_MSG(3, ("NamedGroup: %s ( %x )",
ffdh_group, *group_list));
}
/* Length of named_group_list */