From c824263361e05fd95e8fde1772c036b708f81313 Mon Sep 17 00:00:00 2001 From: Valerio Setti Date: Thu, 30 Jul 2026 10:23:02 +0200 Subject: [PATCH] library: ssl_tls: replace wrong usage of mbedtls_pk_get_type with mbedtls_pk_get_key_type The intent on these lines was to get 'psa_key_type_t' for which 'mbedtls_pk_get_key_type' should clearly be used, not 'mbedtls_pk_get_type'. Signed-off-by: Valerio Setti --- library/ssl_tls.c | 4 ++-- library/ssl_tls12_server.c | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/library/ssl_tls.c b/library/ssl_tls.c index d47d4d6a3d..b5267c32ee 100644 --- a/library/ssl_tls.c +++ b/library/ssl_tls.c @@ -8815,8 +8815,8 @@ int mbedtls_ssl_verify_certificate(mbedtls_ssl_context *ssl, #if defined(MBEDTLS_SSL_PROTO_TLS1_2) && \ defined(PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY) if (ssl->tls_version == MBEDTLS_SSL_VERSION_TLS1_2 && - PSA_KEY_TYPE_IS_ECC(mbedtls_pk_get_type(&chain->pk))) { - psa_key_type_t key_type = mbedtls_pk_get_type(&chain->pk); + PSA_KEY_TYPE_IS_ECC(mbedtls_pk_get_key_type(&chain->pk))) { + psa_key_type_t key_type = mbedtls_pk_get_key_type(&chain->pk); psa_ecc_family_t ec_family = PSA_KEY_TYPE_ECC_GET_FAMILY(key_type); size_t bits = mbedtls_pk_get_bitlen(&chain->pk); int tls_id = mbedtls_ssl_get_tls_id_from_curve_info(ec_family, bits); diff --git a/library/ssl_tls12_server.c b/library/ssl_tls12_server.c index cb0d0e5126..b02ae505ef 100644 --- a/library/ssl_tls12_server.c +++ b/library/ssl_tls12_server.c @@ -629,7 +629,7 @@ static int ssl_check_key_curve(mbedtls_pk_context *pk, uint16_t *curves_tls_id) { uint16_t *curr_tls_id = curves_tls_id; - psa_key_type_t key_type = mbedtls_pk_get_type(pk); + psa_key_type_t key_type = mbedtls_pk_get_key_type(pk); size_t key_bits = mbedtls_pk_get_bitlen(pk); psa_key_type_t curr_key_type; size_t curr_key_bits;