From f20b3f7b2c1adc4f5c76caa3236976904573531f Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Sat, 10 Dec 2016 12:26:31 +0100 Subject: openssl: BoringSSL doesn't provide curve data for ECC Brainpool curves --- src/libstrongswan/plugins/openssl/openssl_ec_diffie_hellman.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) (limited to 'src/libstrongswan/plugins/openssl/openssl_ec_diffie_hellman.c') diff --git a/src/libstrongswan/plugins/openssl/openssl_ec_diffie_hellman.c b/src/libstrongswan/plugins/openssl/openssl_ec_diffie_hellman.c index 11d6e8ec5..11185e0c7 100644 --- a/src/libstrongswan/plugins/openssl/openssl_ec_diffie_hellman.c +++ b/src/libstrongswan/plugins/openssl/openssl_ec_diffie_hellman.c @@ -327,9 +327,12 @@ METHOD(diffie_hellman_t, destroy, void, /** * ECC Brainpool curves are not available in OpenSSL releases < 1.0.2, but we * don't check the version in case somebody backported them. + * + * BoringSSL defines the constants but not the curves. */ #if (!defined(NID_brainpoolP224r1) || !defined(NID_brainpoolP256r1) || \ - !defined(NID_brainpoolP384r1) || !defined(NID_brainpoolP512r1)) + !defined(NID_brainpoolP384r1) || !defined(NID_brainpoolP512r1) || \ + defined(OPENSSL_IS_BORINGSSL)) /** * Parameters for ECC Brainpool curves -- cgit v1.2.3