Fix implementation of `PreferNoDHEKEX` option.
authorMarkus Minichmayr <markus@tapkey.com>
Mon, 27 Nov 2023 17:26:51 +0000 (18:26 +0100)
committerTomas Mraz <tomas@openssl.org>
Thu, 30 Nov 2023 17:40:44 +0000 (18:40 +0100)
commitf290663148ddddaffc0dc8737b08a244b49a76ba
tree3d659afd49bf903b6fa73333a63ba8ba93f46f13
parent58d926213f00ba7046d0868de8b37929aa067a1f
Fix implementation of `PreferNoDHEKEX` option.

`tls_parse_ctos_key_share()` didn't properly handle the option.
Avoid the need to deal with the option in multiple places by properly
handling it in `tls_parse_ctos_psk_kex_modes()`.

Reviewed-by: Todd Short <todd.short@me.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22844)
ssl/statem/extensions.c
ssl/statem/extensions_srvr.c