From 606dae9bd0682a30fe97de5d03833d16ffbec5d0 Mon Sep 17 00:00:00 2001 From: Peter Dettman Date: Tue, 5 Sep 2017 12:42:19 +0700 Subject: Tolerate unexpected ec_point_formats in ServerHello --- crypto/src/crypto/tls/AbstractTlsClient.cs | 10 ++++++++++ 1 file changed, 10 insertions(+) (limited to 'crypto') diff --git a/crypto/src/crypto/tls/AbstractTlsClient.cs b/crypto/src/crypto/tls/AbstractTlsClient.cs index be4702e5e..bddbab87f 100644 --- a/crypto/src/crypto/tls/AbstractTlsClient.cs +++ b/crypto/src/crypto/tls/AbstractTlsClient.cs @@ -42,6 +42,16 @@ namespace Org.BouncyCastle.Crypto.Tls */ TlsEccUtilities.ReadSupportedEllipticCurvesExtension(extensionData); return true; + + case ExtensionType.ec_point_formats: + /* + * Exception added based on field reports that some servers send this even when they + * didn't negotiate an ECC cipher suite. If present, we still require that it is a valid + * ECPointFormatList. + */ + TlsEccUtilities.ReadSupportedPointFormatsExtension(extensionData); + return true; + default: return false; } -- cgit 1.4.1