denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

openssl: BoringSSL doesn't provide curve data for ECC Brainpool curves

Browse Source
This commit is contained in:
Tobias Brunner
2016-12-10 12:27:47 +01:00
parent aae9a9e678
commit f20b3f7b2c
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/plugins/openssl/openssl_ec_diffie_hellman.c
+4 -1
View File
@@ -327,9 +327,12 @@ METHOD(diffie_hellman_t, destroy, void,
/** /**
* ECC Brainpool curves are not available in OpenSSL releases < 1.0.2, but we * ECC Brainpool curves are not available in OpenSSL releases < 1.0.2, but we
* don't check the version in case somebody backported them. * don't check the version in case somebody backported them.
*
* BoringSSL defines the constants but not the curves.
*/ */
#if (!defined(NID_brainpoolP224r1) || !defined(NID_brainpoolP256r1) || \ #if (!defined(NID_brainpoolP224r1) || !defined(NID_brainpoolP256r1) || \
!defined(NID_brainpoolP384r1) || !defined(NID_brainpoolP512r1)) !defined(NID_brainpoolP384r1) || !defined(NID_brainpoolP512r1) || \
defined(OPENSSL_IS_BORINGSSL))
/** /**
* Parameters for ECC Brainpool curves * Parameters for ECC Brainpool curves