Merge pull request #4482 from miyazakh/mindowngarde_staticrsa

TLS 1.3: ServerHello downgrade with no extensions fix
This commit is contained in:
Sean Parkinson
2021-10-20 07:58:34 +10:00
committed by GitHub

View File

@ -3486,6 +3486,8 @@ int DoTls13ServerHello(WOLFSSL* ssl, const byte* input, word32* inOutIdx,
if (!ssl->options.downgrade)
return BUFFER_ERROR;
#ifndef WOLFSSL_NO_TLS12
/* Force client hello version 1.2 to work for static RSA. */
ssl->chVersion.minor = TLSv1_2_MINOR;
ssl->version.minor = TLSv1_2_MINOR;
#endif
ssl->options.haveEMS = 0;