@@ -15969,8 +15969,7 @@ int TLSX_PopulateExtensions(WOLFSSL* ssl, byte isServer)
1596915969 }
1597015970#endif
1597115971
15972- #if (defined(HAVE_ECC) || defined(HAVE_CURVE25519) || \
15973- defined(HAVE_CURVE448)) && defined(HAVE_SUPPORTED_CURVES)
15972+ #if defined(HAVE_SUPPORTED_CURVES)
1597415973 if (!ssl->options.userCurves && !ssl->ctx->userCurves) {
1597515974 if (TLSX_Find(ssl->ctx->extensions,
1597615975 TLSX_SUPPORTED_GROUPS) == NULL) {
@@ -15979,15 +15978,17 @@ int TLSX_PopulateExtensions(WOLFSSL* ssl, byte isServer)
1597915978 return ret;
1598015979 }
1598115980 }
15981+ #if defined(HAVE_ECC) || defined(HAVE_CURVE25519) || defined(HAVE_CURVE448)
1598215982 if ((!IsAtLeastTLSv1_3(ssl->version) || ssl->options.downgrade) &&
1598315983 TLSX_Find(ssl->ctx->extensions, TLSX_EC_POINT_FORMATS) == NULL &&
1598415984 TLSX_Find(ssl->extensions, TLSX_EC_POINT_FORMATS) == NULL) {
15985- ret = TLSX_UsePointFormat(&ssl->extensions,
15985+ ret = TLSX_UsePointFormat(&ssl->extensions,
1598615986 WOLFSSL_EC_PF_UNCOMPRESSED, ssl->heap);
15987- if (ret != WOLFSSL_SUCCESS)
15988- return ret;
15987+ if (ret != WOLFSSL_SUCCESS)
15988+ return ret;
1598915989 }
15990- #endif /* (HAVE_ECC || CURVE25519 || CURVE448) && HAVE_SUPPORTED_CURVES */
15990+ #endif
15991+ #endif /* HAVE_SUPPORTED_CURVES */
1599115992
1599215993#ifdef WOLFSSL_SRTP
1599315994 if (ssl->options.dtls && ssl->dtlsSrtpProfiles != 0) {
@@ -16036,20 +16037,6 @@ int TLSX_PopulateExtensions(WOLFSSL* ssl, byte isServer)
1603616037 return ret;
1603716038 }
1603816039
16039- #if !defined(HAVE_ECC) && !defined(HAVE_CURVE25519) && \
16040- !defined(HAVE_CURVE448) && defined(HAVE_SUPPORTED_CURVES)
16041- if (TLSX_Find(ssl->ctx->extensions, TLSX_SUPPORTED_GROUPS) == NULL) {
16042- /* Put in DH groups for TLS 1.3 only. */
16043- ret = TLSX_PopulateSupportedGroups(ssl, &ssl->extensions);
16044- if (ret != WOLFSSL_SUCCESS)
16045- return ret;
16046- /* ret value will be overwritten in !NO_PSK case */
16047- #ifdef NO_PSK
16048- ret = 0;
16049- #endif
16050- }
16051- #endif /* !(HAVE_ECC || CURVE25519 || CURVE448) && HAVE_SUPPORTED_CURVES */
16052-
1605316040 #if !defined(NO_CERTS) && !defined(WOLFSSL_NO_SIGALG)
1605416041 if (ssl->certHashSigAlgoSz > 0) {
1605516042 WOLFSSL_MSG("Adding signature algorithms cert extension");
0 commit comments