Frank Denis 12a58087a4

Fix TLS 1.2 client key exchange to use negotiated named group (#25007) ...

The TLS 1.2 implementation was incorrectly hardcoded to always send the
secp256r1 public key in the client key exchange message, regardless of
which elliptic curve the server actually negotiated.

This caused TLS handshake failures with servers that preferred other curves
like X25519.

This fix:

- Tracks the negotiated named group from the server key exchange message
- Dynamically selects the correct public key (X25519, secp256r1, or
  secp384r1) based on what the server negotiated
- Properly constructs the client key exchange message with the
  appropriate key size for each curve type

Fixes TLS 1.2 connections to servers like ziglang.freetls.fastly.net
that prefer X25519 over secp256r1.

2025-08-27 11:18:40 +02:00

..

Client.zig

Fix TLS 1.2 client key exchange to use negotiated named group (#25007)

2025-08-27 11:18:40 +02:00