Skip to content

Commit adfc28d

Browse files
Fix basic SSL server definitions (#6402)
A typo was present in several ifdefs which would allow a server to negotiate an EC connection even when in basic SSL mode. When this happened, a crash would occur (since there were no EC or advanced AES modes installed). Fix the typo, fixes #6397
1 parent ea17a06 commit adfc28d

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

Diff for: libraries/ESP8266WiFi/src/WiFiClientSecureBearSSL.cpp

+3-3
Original file line numberDiff line numberDiff line change
@@ -819,7 +819,7 @@ extern "C" {
819819
BR_TLS_RSA_WITH_3DES_EDE_CBC_SHA
820820
#endif
821821
};
822-
#ifndef BEARSSL_BASIC
822+
#ifndef BEARSSL_SSL_BASIC
823823
// Server w/EC has one set, not possible with basic SSL config
824824
static const uint16_t suites_server_ec_P [] PROGMEM = {
825825
BR_TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,
@@ -852,7 +852,7 @@ extern "C" {
852852
#endif
853853

854854
static const uint16_t suites_server_rsa_P[] PROGMEM = {
855-
#ifndef BEARSSL_BASIC
855+
#ifndef BEARSSL_SSL_BASIC
856856
BR_TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256,
857857
BR_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
858858
BR_TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
@@ -871,7 +871,7 @@ extern "C" {
871871
BR_TLS_RSA_WITH_AES_256_CBC_SHA256,
872872
BR_TLS_RSA_WITH_AES_128_CBC_SHA,
873873
BR_TLS_RSA_WITH_AES_256_CBC_SHA,
874-
#ifndef BEARSSL_BASIC
874+
#ifndef BEARSSL_SSL_BASIC
875875
BR_TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,
876876
BR_TLS_RSA_WITH_3DES_EDE_CBC_SHA
877877
#endif

0 commit comments

Comments
 (0)