We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 9eb5b2a commit d8f0b37Copy full SHA for d8f0b37
library/ssl_tls.c
@@ -8782,7 +8782,7 @@ int mbedtls_ssl_verify_certificate(mbedtls_ssl_context *ssl,
8782
#if defined(MBEDTLS_SSL_PROTO_TLS1_2) && \
8783
defined(PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY)
8784
if (ssl->tls_version == MBEDTLS_SSL_VERSION_TLS1_2 &&
8785
- mbedtls_pk_can_do(&chain->pk, MBEDTLS_PK_ECKEY)) {
+ PSA_KEY_TYPE_IS_ECC(mbedtls_pk_get_type(&chain->pk))) {
8786
if (mbedtls_ssl_check_curve(ssl, mbedtls_pk_get_ec_group_id(&chain->pk)) != 0) {
8787
MBEDTLS_SSL_DEBUG_MSG(1, ("bad certificate (EC key curve)"));
8788
ssl->session_negotiate->verify_result |= MBEDTLS_X509_BADCERT_BAD_KEY;
0 commit comments