tree ace18fa6bf04100a82a9453f114f6050f12808b8
parent 81bb4d0378e2bc8161a311cd3cac75f6c4665609
author Hanno Becker <hanno.becker@arm.com> 1550438527 +0000
committer Hanno Becker <hanno.becker@arm.com> 1561449625 +0100

Use private key to check suitability of PK type when picking srv CRT

The server-side routine `ssl_pick_cert()` is responsible for
picking a suitable CRT from the list of CRTs configured on the
server. For that, it previously used the public key context
from the certificate to check whether its type (including the
curve type for ECC keys) suits the ciphersuite and the client's
preferences.

This commit changes the code to instead use the PK context
holding the corresponding private key. For inferring the type
of the key, this makes no difference, and it removes a PK-from-CRT
extraction step which, if CRTs are stored raw, is costly in terms
of computation and memory: CRTs need to be parsed, and memory needs
to be allocated for the PK context.