sharpetronics/strongswan
1
0
Fork 0
mirror of https://github.com/strongswan/strongswan.git synced 2025-10-04 00:00:14 -04:00
Code Issues Projects Releases Wiki Activity

botan: Reject EC keys with explicitly encoded parameters

Browse Source 
This requires a function that will be added in the upcoming Botan 3.2
release.
This commit is contained in:
Tobias Brunner 2023-08-31 14:27:09 +02:00
parent 2bccdefc2c
commit 0b989c7b20
2 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
configure.ac
View File

@ -1215,7 +1215,7 @@ if test x$botan = xtrue; then
AC_SUBST(botan_LIBS)
saved_LIBS=$LIBS
LIBS="$botan_LIBS"
AC_CHECK_FUNCS(botan_rng_init_custom)
AC_CHECK_FUNCS(botan_rng_init_custom botan_pubkey_ecc_key_used_explicit_encoding)
LIBS=$saved_LIBS
fi

8
src/libstrongswan/plugins/botan/botan_ec_public_key.c
View File

@ -235,6 +235,14 @@ botan_ec_public_key_t *botan_ec_public_key_adopt(botan_pubkey_t key)
{
private_botan_ec_public_key_t *this;
#ifdef HAVE_BOTAN_PUBKEY_ECC_KEY_USED_EXPLICIT_ENCODING
if (botan_pubkey_ecc_key_used_explicit_encoding(key))
{
botan_pubkey_destroy(key);
return NULL;
}
#endif
INIT(this,
.public = {
.key = {