commit a21af3da0066ae64757004e48d90fd70f76f251d
author Przemek Stekiel <przemyslaw.stekiel@mobica.com> Mon Mar 14 10:09:13 2022 +0100
committer Przemek Stekiel <przemyslaw.stekiel@mobica.com> Mon Mar 14 10:09:13 2022 +0100
tree 2b36f3e7e248b64b0ca8d5400b8257da4bc24cbe
parent 0a60c129deb74e4e276d8bc733bc286652cebae2

Use mbedtls_psa_parse_tls_ecc_group() instead PSA_KEY_TYPE_ECC_KEY_PAIR( mbedtls_ecc_group_to_psa() )

Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>

library/ssl_srv.c

diff --git a/library/ssl_srv.c b/library/ssl_srv.c
index 7218e3e..e78e816 100644
--- a/library/ssl_srv.c
+++ b/library/ssl_srv.c
@@ -3119,17 +3119,12 @@
         MBEDTLS_SSL_DEBUG_MSG( 1, ( "Perform PSA-based ECDH computation." ) );
 
         /* Convert EC group to PSA key type. */
-        if( ( handshake->ecdh_psa_type =
-                PSA_KEY_TYPE_ECC_KEY_PAIR( mbedtls_ecc_group_to_psa(
-                     (*curve)->grp_id, &ecdh_bits ) ) ) == 0 )
-        {
-            MBEDTLS_SSL_DEBUG_MSG( 1, ( "Could not convert ECC group to PSA." ) );
-            return( MBEDTLS_ERR_SSL_HANDSHAKE_FAILURE );
-        }
+        handshake->ecdh_psa_type = mbedtls_psa_parse_tls_ecc_group(
+                     (*curve)->tls_id, &ecdh_bits );
 
-        if( ecdh_bits > 0xffff )
+        if( handshake->ecdh_psa_type == 0 || ecdh_bits > 0xffff )
         {
-            MBEDTLS_SSL_DEBUG_MSG( 1, ( "Invalid ecdh_bits." ) );
+            MBEDTLS_SSL_DEBUG_MSG( 1, ( "Invalid ecc group parse." ) );
             return( MBEDTLS_ERR_SSL_ILLEGAL_PARAMETER );
         }
         handshake->ecdh_bits = (uint16_t) ecdh_bits;