SSL_CTX_set1_curves issues when setting a non-TLS named curve

[Giuseppe D'Angelo]

Hi,








[1] https://codereview.qt-project.org/#/c/94022/

I'm work on a Qt patch which adds the capability to select which elliptic curves should be used by a client socket when negotiating an EC cipher [1]. When using some TLS named curves [2], everything seems to work just fine. The problem arises when some other curve gets (accidentally?) chosen by the user: as of latest 1.0.2, the connection *hangs* without even a ClientHello sent... Is this a bug -- i.e. should either SSL_CTX_set1_curves or the subsequent SSL_connect immediately return with an error instead of hanging? Or is there some other API I'm supposed to use? [2] https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#tls-parameters-8

Thanks,
--
Giuseppe D'Angelo | giuseppe.dang...@kdab.com | Software Engineer
KDAB (UK) Ltd., a KDAB Group company
Tel. UK +44-1738-450410, Sweden (HQ) +46-563-540090
KDAB - Qt Experts - Platform-independent software solutions

smime.p7s
Description: Firma crittografica S/MIME