Ronald Cron f1ed5951e3 ssl_srv.c: Mark ETM as disabled if cipher is not CBC ...

Encrypt-Then-Mac (ETM) is supported in Mbed TLS
server for TLS version geater than SSLv3 and only
for the CBC cipher mode thus make it
clear in the SSL context.

The previous code was ok as long as the check of
the ETM status was done only in the case of the CBC
cipher mode but fragile as #5573 revealed.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>

2022-03-28 12:16:13 +02:00

160 KiB

Raw Blame History

View Raw