tree e103524f6e17c1b41b3fb7933f26079ff9d8818e
parent ec9c626b75aecd99663695d53460c6a79d5c6d44
author Gilles Peskine <Gilles.Peskine@arm.com> 1509092324 +0200
committer Gilles Peskine <Gilles.Peskine@arm.com> 1524554763 +0200

Don't rely on private key metadata in SSL

In SSL, don't use mbedtls_pk_ec or mbedtls_pk_rsa on a private
signature or decryption key (as opposed to a public key or a key used
for DH/ECDH). Extract the data (it's the same data) from the public
key object instead. This way the code works even if the private key is
opaque or if there is no private key object at all.

Specifically, with an EC key, when checking whether the curve in a
server key matches the handshake parameters, rely only on the offered
certificate and not on the metadata of the private key.