wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-02-04 07:55:05 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #9718 from SparkiDev/tls12_msg_order_checks

Browse Source 
TLS 1.2 message order check: certificate before CKE
This commit is contained in:
JacobBarthelmeh
2026-01-30 10:50:33 -07:00
committed by GitHub
parent 9ca379f3bb 5b6f86bc8e
commit 1dc177fdbe
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/internal.c
View File

@@ -18083,6 +18083,12 @@ static int SanityCheckMsgReceived(WOLFSSL* ssl, byte type)
WOLFSSL_ERROR_VERBOSE(OUT_OF_ORDER_E);
return OUT_OF_ORDER_E;
}
if (!ssl->options.resuming && ssl->options.verifyPeer &&
!ssl->options.usingPSK_cipher &&
!ssl->options.usingAnon_cipher &&
!ssl->msgsReceived.got_certificate) {
return OUT_OF_ORDER_E;
}
if (ssl->msgsReceived.got_certificate_verify||
ssl->msgsReceived.got_change_cipher ||
ssl->msgsReceived.got_finished) {