mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2025-12-14 02:22:15 +03:00
Remove additional ifdef's
Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
This commit is contained in:
@@ -217,8 +217,7 @@ typedef enum {
|
|||||||
#endif
|
#endif
|
||||||
|
|
||||||
/* Key exchanges that don't involve ephemeral keys */
|
/* Key exchanges that don't involve ephemeral keys */
|
||||||
#if defined(MBEDTLS_KEY_EXCHANGE_PSK_ENABLED) || \
|
#if defined(MBEDTLS_KEY_EXCHANGE_PSK_ENABLED)
|
||||||
defined(MBEDTLS_KEY_EXCHANGE_SOME_ECDH_ENABLED)
|
|
||||||
#define MBEDTLS_KEY_EXCHANGE_SOME_NON_PFS_ENABLED
|
#define MBEDTLS_KEY_EXCHANGE_SOME_NON_PFS_ENABLED
|
||||||
#endif
|
#endif
|
||||||
|
|
||||||
@@ -244,8 +243,7 @@ typedef enum {
|
|||||||
#endif
|
#endif
|
||||||
|
|
||||||
/* TLS 1.2 key exchanges using ECDH or ECDHE*/
|
/* TLS 1.2 key exchanges using ECDH or ECDHE*/
|
||||||
#if defined(MBEDTLS_KEY_EXCHANGE_SOME_ECDH_ENABLED) || \
|
#if defined(MBEDTLS_KEY_EXCHANGE_SOME_ECDHE_ENABLED)
|
||||||
defined(MBEDTLS_KEY_EXCHANGE_SOME_ECDHE_ENABLED)
|
|
||||||
#define MBEDTLS_KEY_EXCHANGE_SOME_ECDH_OR_ECDHE_1_2_ENABLED
|
#define MBEDTLS_KEY_EXCHANGE_SOME_ECDH_OR_ECDHE_1_2_ENABLED
|
||||||
#endif
|
#endif
|
||||||
|
|
||||||
|
|||||||
@@ -54,18 +54,6 @@ static inline int mbedtls_ssl_ciphersuite_no_pfs(const mbedtls_ssl_ciphersuite_t
|
|||||||
}
|
}
|
||||||
#endif /* MBEDTLS_KEY_EXCHANGE_SOME_NON_PFS_ENABLED */
|
#endif /* MBEDTLS_KEY_EXCHANGE_SOME_NON_PFS_ENABLED */
|
||||||
|
|
||||||
#if defined(MBEDTLS_KEY_EXCHANGE_SOME_ECDH_ENABLED)
|
|
||||||
static inline int mbedtls_ssl_ciphersuite_uses_ecdh(const mbedtls_ssl_ciphersuite_t *info)
|
|
||||||
{
|
|
||||||
switch (info->MBEDTLS_PRIVATE(key_exchange)) {
|
|
||||||
return 1;
|
|
||||||
|
|
||||||
default:
|
|
||||||
return 0;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
#endif /* MBEDTLS_KEY_EXCHANGE_SOME_ECDH_ENABLED */
|
|
||||||
|
|
||||||
static inline int mbedtls_ssl_ciphersuite_cert_req_allowed(const mbedtls_ssl_ciphersuite_t *info)
|
static inline int mbedtls_ssl_ciphersuite_cert_req_allowed(const mbedtls_ssl_ciphersuite_t *info)
|
||||||
{
|
{
|
||||||
switch (info->MBEDTLS_PRIVATE(key_exchange)) {
|
switch (info->MBEDTLS_PRIVATE(key_exchange)) {
|
||||||
|
|||||||
@@ -22,8 +22,7 @@
|
|||||||
|
|
||||||
/* Define a local translating function to save code size by not using too many
|
/* Define a local translating function to save code size by not using too many
|
||||||
* arguments in each translating place. */
|
* arguments in each translating place. */
|
||||||
#if defined(MBEDTLS_KEY_EXCHANGE_SOME_ECDH_ENABLED) || \
|
#if defined(MBEDTLS_KEY_EXCHANGE_SOME_ECDHE_ENABLED)
|
||||||
defined(MBEDTLS_KEY_EXCHANGE_SOME_ECDHE_ENABLED)
|
|
||||||
static int local_err_translation(psa_status_t status)
|
static int local_err_translation(psa_status_t status)
|
||||||
{
|
{
|
||||||
return psa_status_to_mbedtls(status, psa_to_ssl_errors,
|
return psa_status_to_mbedtls(status, psa_to_ssl_errors,
|
||||||
@@ -2914,18 +2913,6 @@ static int ssl_write_server_key_exchange(mbedtls_ssl_context *ssl)
|
|||||||
/* Extract static ECDH parameters and abort if ServerKeyExchange
|
/* Extract static ECDH parameters and abort if ServerKeyExchange
|
||||||
* is not needed. */
|
* is not needed. */
|
||||||
if (mbedtls_ssl_ciphersuite_no_pfs(ciphersuite_info)) {
|
if (mbedtls_ssl_ciphersuite_no_pfs(ciphersuite_info)) {
|
||||||
/* For suites involving ECDH, extract DH parameters
|
|
||||||
* from certificate at this point. */
|
|
||||||
#if defined(MBEDTLS_KEY_EXCHANGE_SOME_ECDH_ENABLED)
|
|
||||||
if (mbedtls_ssl_ciphersuite_uses_ecdh(ciphersuite_info)) {
|
|
||||||
ret = ssl_get_ecdh_params_from_cert(ssl);
|
|
||||||
if (ret != 0) {
|
|
||||||
MBEDTLS_SSL_DEBUG_RET(1, "ssl_get_ecdh_params_from_cert", ret);
|
|
||||||
return ret;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
#endif /* MBEDTLS_KEY_EXCHANGE_SOME_ECDH_ENABLED */
|
|
||||||
|
|
||||||
/* Key exchanges not involving ephemeral keys don't use
|
/* Key exchanges not involving ephemeral keys don't use
|
||||||
* ServerKeyExchange, so end here. */
|
* ServerKeyExchange, so end here. */
|
||||||
MBEDTLS_SSL_DEBUG_MSG(2, ("<= skip write server key exchange"));
|
MBEDTLS_SSL_DEBUG_MSG(2, ("<= skip write server key exchange"));
|
||||||
|
|||||||
Reference in New Issue
Block a user