Skip to content

Commit df4b1bf

Browse files
pennamandreagilardoni
authored andcommitted
[TEMP] bearssl aiotc_profile. enable ECDHE_RSA for file downloading from storage service
1 parent 8dae988 commit df4b1bf

File tree

1 file changed

+6
-1
lines changed

1 file changed

+6
-1
lines changed

src/tls/profile/aiotc_profile.c

+6-1
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,8 @@ void aiotc_client_profile_init(br_ssl_client_context *cc, br_x509_minimal_contex
4848
* strong enough, and AES-256 is 40% more expensive).
4949
*/
5050
static const uint16_t suites[] = {
51-
BR_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
51+
BR_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
52+
BR_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
5253
};
5354

5455
/*
@@ -74,6 +75,10 @@ void aiotc_client_profile_init(br_ssl_client_context *cc, br_x509_minimal_contex
7475
br_ssl_engine_set_default_ecdsa(&cc->eng);
7576
br_x509_minimal_set_ecdsa(xc, br_ssl_engine_get_ec(&cc->eng), br_ssl_engine_get_ecdsa(&cc->eng));
7677

78+
br_ssl_client_set_default_rsapub(cc);
79+
br_ssl_engine_set_default_rsavrfy(&cc->eng);
80+
br_x509_minimal_set_rsa(xc, br_ssl_engine_get_rsavrfy(&cc->eng));
81+
7782
/*
7883
* Set supported hash functions, for the SSL engine and for the
7984
* X.509 engine.

0 commit comments

Comments
 (0)