blob: cc432bdaee00e7b3ca2179337400c1c05fa50bbe [file] [log] [blame]
Manuel Pégourié-Gonnard01784872022-01-25 11:46:19 +01001Bugfix
2 * Fix a bug in (D)TLS curve negotiation: when MBEDTLS_USE_PSA_CRYPTO was
3 enabled and an ECDHE-ECDSA or ECDHE-RSA key exchange was used, the
4 client would fail to check that the curve selected by the server for
5 ECDHE was indeed one that was offered. As a result, the client would
6 accept any curve that it supported, even if that curve was not allowed
7 according to its configuration.