lib: Reject peer keys of another algorithmtestingbe

The openssl_dhe_derive() function decoded the peer public key from the
wire with d2i_PUBKEY() and handed it straight to
EVP_PKEY_derive_set_peer(). A peer offering a key of a type other than
the one negotiated was only caught inside OpenSSL. This aborts in
OpenSSL debug builds, which tripped integration.

Now we check the decoded key type against the type of the local key
pair first.

Signed-off-by: Dimitri Staessens <dimitri@ouroboros.rocks>
Signed-off-by: Sander Vrijders <sander@ouroboros.rocks>

0 files changed, 0 insertions, 0 deletions