Fix server use of EC point format extension

In the resumption case it would use that extension for any ECC ciphersuite,
but is only allowed to do so if the client sent the extension.

1 files changed, 1 insertions, 1 deletions

diff --git a/src/lib/tls/msg_server_hello.cpp b/src/lib/tls/msg_server_hello.cpp
index 2d5a185f0..223bddde5 100644
--- a/src/lib/tls/msg_server_hello.cpp
+++ b/src/lib/tls/msg_server_hello.cpp
@@ -121,7 +121,7 @@ Server_Hello::Server_Hello(Handshake_IO& io,
          m_extensions.add(new Encrypt_then_MAC);
       }
 
-   if(resumed_session.ciphersuite().ecc_ciphersuite())
+   if(resumed_session.ciphersuite().ecc_ciphersuite() && client_hello.extension_types().count(TLSEXT_EC_POINT_FORMATS))
       {
       m_extensions.add(new Supported_Point_Formats(policy.use_ecc_point_compression()));
       }