feedc0de/wolfssl
1
0
Fork 0
forked from wolfSSL/wolfssl
Code Pull Requests Activity

Merge pull request #4137 from SparkiDev/tls13_hrr_ch_ems

Browse Source 
TLS EMS ext: TLS13 - send in second CH if in first
This commit is contained in:
David Garske
2021-06-17 07:29:19 -07:00
committed by GitHub
parent 5751e20bcc 4bba282a70
commit eb7896919b
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
src/tls.c
View File

@ -11625,7 +11625,12 @@ int TLSX_Parse(WOLFSSL* ssl, const byte* input, word16 length, byte msgType,
}
#ifdef HAVE_EXTENDED_MASTER
if (!isRequest && ssl->options.haveEMS && !pendingEMS)
if (IsAtLeastTLSv1_3(ssl->version) && msgType == hello_retry_request) {
/* Don't change EMS status until server_hello received.
* Second ClientHello must have same extensions.
*/
}
else if (!isRequest && ssl->options.haveEMS && !pendingEMS)
ssl->options.haveEMS = 0;
#endif