forked from wolfSSL/wolfssl
TLS 1.3 PSK no DHE: When not doing PSK don't allow noPskDheKe to be set
This commit is contained in:
@ -4212,6 +4212,9 @@ int DoTls13ClientHello(WOLFSSL* ssl, const byte* input, word32* inOutIdx,
|
||||
}
|
||||
|
||||
if (!usingPSK) {
|
||||
/* Not using PSK so don't require no KE. */
|
||||
ssl->options.noPskDheKe = 0;
|
||||
|
||||
#ifndef NO_CERTS
|
||||
if (TLSX_Find(ssl->extensions, TLSX_KEY_SHARE) == NULL) {
|
||||
WOLFSSL_MSG("Client did not send a KeyShare extension");
|
||||
|
Reference in New Issue
Block a user