forked from wolfSSL/wolfssl
Merge pull request #2893 from SparkiDev/tls13_capable_fix
Another place where TLS 1.3 capable check is required
This commit is contained in:
@ -24252,7 +24252,7 @@ static int DoSessionTicket(WOLFSSL* ssl, const byte* input, word32* inOutIdx,
|
|||||||
return ret;
|
return ret;
|
||||||
|
|
||||||
#ifdef WOLFSSL_TLS13
|
#ifdef WOLFSSL_TLS13
|
||||||
if (IsAtLeastTLSv1_3(ssl->ctx->method->version)) {
|
if (TLSv1_3_Capable(ssl)) {
|
||||||
/* TLS v1.3 capable server downgraded. */
|
/* TLS v1.3 capable server downgraded. */
|
||||||
XMEMCPY(output + idx + RAN_LEN - (TLS13_DOWNGRADE_SZ + 1),
|
XMEMCPY(output + idx + RAN_LEN - (TLS13_DOWNGRADE_SZ + 1),
|
||||||
tls13Downgrade, TLS13_DOWNGRADE_SZ);
|
tls13Downgrade, TLS13_DOWNGRADE_SZ);
|
||||||
|
Reference in New Issue
Block a user