ALPN is returned in ServerHello when downgrading from TLS 1.3

TLS 1.3 Specification has extension returned in EncryptedExtensions.
2018-12-11 11:27:55 +10:00
parent a484749f4c
commit c844b1c253
1 changed files with 1 additions and 0 deletions
--- a/src/tls.c
+++ b/src/tls.c
@ -9951,6 +9951,7 @@ int TLSX_Parse(WOLFSSL* ssl, byte* input, word16 length, byte msgType,
 #ifdef WOLFSSL_TLS13
                if (IsAtLeastTLSv1_3(ssl->ctx->method->version) &&
                        msgType != client_hello &&
+                        msgType != server_hello &&
                        msgType != encrypted_extensions) {
                    return EXT_NOT_ALLOWED;
                }