commit 755bb6af5f6fdfcabaddd018d149c2819125d7b3
author Ron Eldor <Ron.Eldor@arm.com> Wed Feb 14 19:30:48 2018 +0200
committer Ron Eldor <Ron.Eldor@arm.com> Thu Jun 21 16:35:26 2018 +0300
tree e7eff9576edf2a40abc380a3118f493a58cf60d9
parent 8266acacc8d6e1c65fba9a048f56339d0827b2fe

Add ecc extensions only if ecc ciphersuite is used

Fix compliancy to RFC4492. ECC extensions should be included
only if ec ciphersuites are used. Interoperability issue with
bouncy castle. #1157

library/ssl_srv.c

diff --git a/library/ssl_srv.c b/library/ssl_srv.c
index 0ccab58..91079f1 100644
--- a/library/ssl_srv.c
+++ b/library/ssl_srv.c
@@ -2564,8 +2564,12 @@
 
 #if defined(MBEDTLS_ECDH_C) || defined(MBEDTLS_ECDSA_C) || \
     defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
-    ssl_write_supported_point_formats_ext( ssl, p + 2 + ext_len, &olen );
-    ext_len += olen;
+    if ( mbedtls_ssl_ciphersuite_uses_ec(
+         mbedtls_ssl_ciphersuite_from_id( ssl->session_negotiate->ciphersuite ) ) )
+    {
+        ssl_write_supported_point_formats_ext( ssl, p + 2 + ext_len, &olen );
+        ext_len += olen;
+    }
 #endif
 
 #if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)