commit d4311049260df838e2fe596d2b7165180d1d14cb
author Jaeden Amero <jaeden@patater.com> Mon Jun 03 08:27:16 2019 +0100
committer Jaeden Amero <jaeden.amero@arm.com> Thu Jun 20 10:59:05 2019 +0100
tree 8bd7ac47c907d649f6a8f89f7a1205710fd5b62d
parent 4f4af6e2ef41b38043ecc72a019b06ddad8702f6

ssl_tls: Enable Suite B with subset of ECP curves

Make sure the code compiles even if some curves are not defined.

Fixes #1591

ChangeLog

diff --git a/ChangeLog b/ChangeLog
index 7e91900..bca38b5 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -70,6 +70,8 @@
    * Fix Visual Studio Release x64 build configuration by inheriting
      PlatformToolset from the project configuration. Fixes #1430 reported by
      irwir.
+   * Enable Suite B with subset of ECP curves. Make sure the code compiles even
+     if some curves are not defined. Fixes #1591 reported by dbedev.
 
 API Changes
    * Extend the MBEDTLS_SSL_EXPORT_KEYS to export the handshake randbytes,

library/ssl_tls.c

diff --git a/library/ssl_tls.c b/library/ssl_tls.c
index d9e777d..68a1e59 100644
--- a/library/ssl_tls.c
+++ b/library/ssl_tls.c
@@ -10536,8 +10536,12 @@
 
 #if defined(MBEDTLS_ECP_C)
 static mbedtls_ecp_group_id ssl_preset_suiteb_curves[] = {
+#if defined(MBEDTLS_ECP_DP_SECP256R1_ENABLED)
     MBEDTLS_ECP_DP_SECP256R1,
+#endif
+#if defined(MBEDTLS_ECP_DP_SECP384R1_ENABLED)
     MBEDTLS_ECP_DP_SECP384R1,
+#endif
     MBEDTLS_ECP_DP_NONE
 };
 #endif