ssl_cli/srv2: Indicate nss_keylog and eap_tls are mut. exclusive
diff --git a/programs/ssl/ssl_server2.c b/programs/ssl/ssl_server2.c
index f770262..3683f3c 100644
--- a/programs/ssl/ssl_server2.c
+++ b/programs/ssl/ssl_server2.c
@@ -311,7 +311,8 @@
#define USAGE_EAP_TLS \
" eap_tls=%%d default: 0 (disabled)\n"
#define USAGE_NSS_KEYLOG \
- " nss_keylog=%%d default: 0 (disabled)\n"
+ " nss_keylog=%%d default: 0 (disabled)\n" \
+ " This cannot be used with eap_tls=1\n"
#define USAGE_NSS_KEYLOG_FILE \
" nss_keylog_file=%%s\n"
#else
@@ -2424,6 +2425,12 @@
goto usage;
}
+ if( opt.nss_keylog != 0 && opt.eap_tls != 0 )
+ {
+ mbedtls_printf( "Error: eap_tls and nss_keylog options cannot be used together.\n" );
+ goto usage;
+ }
+
/* Event-driven IO is incompatible with the above custom
* receive and send functions, as the polling builds on
* refers to the underlying net_context. */