mirror of
https://github.com/wolfSSL/wolfssl.git
synced 2025-07-29 18:27:29 +02:00
Merge pull request #4439 from SparkiDev/tls13_min_down_no_ext
TLS 1.3: Check min downgrade when no extensions in ServerHello
This commit is contained in:
@ -3489,6 +3489,13 @@ int DoTls13ServerHello(WOLFSSL* ssl, const byte* input, word32* inOutIdx,
|
||||
ssl->version.minor = TLSv1_2_MINOR;
|
||||
#endif
|
||||
ssl->options.haveEMS = 0;
|
||||
if (args->pv.minor < ssl->options.minDowngrade)
|
||||
return VERSION_ERROR;
|
||||
#ifndef WOLFSSL_NO_TLS12
|
||||
return DoServerHello(ssl, input, inOutIdx, helloSz);
|
||||
#else
|
||||
return VERSION_ERROR;
|
||||
#endif
|
||||
}
|
||||
|
||||
if ((args->idx - args->begin) < helloSz) {
|
||||
|
Reference in New Issue
Block a user