Branch: Tag:

2015-02-23

2015-02-23 12:41:19 by Martin Nilsson <nilsson@opera.com>

We already filter out ECC suites in Session, so no need to do that in ServerConnection as well. Moved point format check.

312:    }      #if constant(Crypto.ECC.Curve) -  if (!sizeof(ecc_curves)) { +  if (!sizeof(ecc_curves) || ecc_point_format==-1) {    // The client may claim to support ECC, but hasn't sent the    // required extension or any curves that we support, so    // don't believe it.
357:    }      #if constant(Crypto.ECC.Curve) -  if (!sizeof(ecc_curves)) { +  if (!sizeof(ecc_curves) || ecc_point_format==-1) {    // The client may claim to support ECC, but hasn't sent the    // required extension, so don't believe it.    ke_mask &= ~((1<<KE_ecdh_rsa)|(1<<KE_ecdhe_rsa)|