Update the true minimum ECC key size default

The discrepancy shows up when trying to compile with FIPS
wolfSSL · Jul 3, 2024 · 7cc42d4 · 7cc42d4
1 parent e340e41
commit 7cc42d4
Showing 1 changed file with 9 additions and 2 deletions.
diff --git a/configure.ac b/configure.ac
@@ -3979,9 +3979,16 @@ fi
 
 # ECC Minimum Key Size
 AC_ARG_WITH([eccminsz],
- [AS_HELP_STRING([--with-eccminsz=BITS],[Sets the ECC minimum key size (default: 224 bits)])],
+ [AS_HELP_STRING([--with-eccminsz=BITS],[Sets the ECC minimum key size (default: 224 bits non-FIPS / 192 bits with FIPS)])],
  [ ENABLED_ECCMINSZ=$withval ],
- [ ENABLED_ECCMINSZ=224 ]
+ [
+ if test "x$ENABLED_FIPS" = "xno"
+ then
+ ENABLED_ECCMINSZ=224
+ else
+ ENABLED_ECCMINSZ=192
+ fi
+ ]
 )
 AM_CFLAGS="$AM_CFLAGS -DECC_MIN_KEY_SZ=$ENABLED_ECCMINSZ"