commit a05e9c1ec80cdce57135ec2afcf86d2c6a2cec2b
author Przemek Stekiel <przemyslaw.stekiel@mobica.com> Thu Jun 15 16:58:51 2023 +0200
committer Przemek Stekiel <przemyslaw.stekiel@mobica.com> Thu Jun 15 17:07:16 2023 +0200
tree 88cf19f834cc1e1fa5adad171575951d0ec24239
parent 8c0a95374f64ea1ab3d9d17901c424ca98ab3bc9

Fix selection of default FFDH group

Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>

library/ssl_tls13_client.c

diff --git a/library/ssl_tls13_client.c b/library/ssl_tls13_client.c
index 2fbcdd4..8f75746 100644
--- a/library/ssl_tls13_client.c
+++ b/library/ssl_tls13_client.c
@@ -227,22 +227,23 @@
     if (group_list == NULL) {
         return MBEDTLS_ERR_SSL_BAD_CONFIG;
     }
-#if defined(PSA_WANT_ALG_FFDH)
-    if (mbedtls_ssl_tls13_named_group_is_dhe(*group_list)) {
-        *group_id = *group_list;
-        return 0;
-    }
-#endif /* PSA_WANT_ALG_FFDH */
-#if defined(PSA_WANT_ALG_ECDH)
+
     for (; *group_list != 0; group_list++) {
+#if defined(PSA_WANT_ALG_ECDH)
         if ((mbedtls_ssl_get_psa_curve_info_from_tls_id(
                  *group_list, NULL, NULL) == PSA_SUCCESS) &&
             mbedtls_ssl_tls13_named_group_is_ecdhe(*group_list)) {
             *group_id = *group_list;
             return 0;
         }
+#endif
+#if defined(PSA_WANT_ALG_FFDH)
+        if (mbedtls_ssl_tls13_named_group_is_dhe(*group_list)) {
+            *group_id = *group_list;
+            return 0;
+        }
+#endif
     }
-#endif /* PSA_WANT_ALG_ECDH */
 #else
     ((void) ssl);
     ((void) group_id);