feedc0de/wolfssl
1
0
Fork 0
forked from wolfSSL/wolfssl
Code Pull Requests Activity

TLS send change cipher: Don't set keys when negotiating TLS 1.3

Browse Source
This commit is contained in:
Sean Parkinson
2021-01-05 14:32:48 +10:00
parent 54f072fd8d
commit a6b69b6864
1 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
src/internal.c
View File

@ -16067,13 +16067,18 @@ int SendChangeCipher(WOLFSSL* ssl)
#endif
ssl->buffers.outputBuffer.length += sendSz;
/* setup encrypt keys */
if ((ret = SetKeysSide(ssl, ENCRYPT_SIDE_ONLY)) != 0)
return ret;
#ifdef WOLFSSL_TLS13
if (!ssl->options.tls1_3)
#endif
{
/* setup encrypt keys */
if ((ret = SetKeysSide(ssl, ENCRYPT_SIDE_ONLY)) != 0)
return ret;
#if defined(HAVE_ENCRYPT_THEN_MAC) && !defined(WOLFSSL_AEAD_ONLY)
ssl->options.startedETMWrite = ssl->options.encThenMac;
#endif
}
if (ssl->options.groupMessages)
return 0;