TLS 1.2 with Public Key pinning

Hi gopi219,

There seems to be something wrong with this public key. It has the right format, but the content is mathematically invalid. That’s why Mbed TLS refuses to import it. With a debugger I can see that it fails in ecp_check_pubkey_sw, meaning that the coordinates in the file are not on the curve. OpenSSL makes the same complaint: 139679113352856:error:1006706B:elliptic curve routines:ec_GFp_simple_oct2point:point is not on curve:ecp_oct.c:417:

So there must be something wrong with the key generation, but I don’t know what it could be. I tried programs/pkey/gen_key in Mbed TLS and it produced a correct key.

Regards,
Gilles Peskine — Mbed TLS team member