diff --git a/library/ssl_client.c b/library/ssl_client.c index 3cfbecd28f..0b3c53ee6a 100644 --- a/library/ssl_client.c +++ b/library/ssl_client.c @@ -223,7 +223,6 @@ static int ssl_write_alpn_ext(mbedtls_ssl_context *ssl, * generalization of the TLS 1.2 supported elliptic curves extension. They both * share the same extension identifier. * - * DHE groups are not supported yet. */ MBEDTLS_CHECK_RETURN_CRITICAL static int ssl_write_supported_groups_ext(mbedtls_ssl_context *ssl, diff --git a/library/ssl_tls12_server.c b/library/ssl_tls12_server.c index 86a181f180..0d493daf92 100644 --- a/library/ssl_tls12_server.c +++ b/library/ssl_tls12_server.c @@ -179,7 +179,6 @@ static int ssl_parse_renegotiation_info(mbedtls_ssl_context *ssl, * generalization of the TLS 1.2 supported elliptic curves extension. They both * share the same extension identifier. * - * DHE groups are not supported yet. */ MBEDTLS_CHECK_RETURN_CRITICAL static int ssl_parse_supported_groups_ext(mbedtls_ssl_context *ssl, diff --git a/tests/ssl-opt.sh b/tests/ssl-opt.sh index ff5a04ef89..ad2fe8b4a3 100755 --- a/tests/ssl-opt.sh +++ b/tests/ssl-opt.sh @@ -693,7 +693,7 @@ requires_openssl_tls1_3_with_ffdh() { requires_openssl_3_x } -# skip next test if it cannot handle ephemeral key exchange +# skip next test if openssl cannot handle ephemeral key exchange requires_openssl_tls1_3_with_compatible_ephemeral() { requires_openssl_next