From 53ad7728bf038e65d0def4d4fc4870ccc8d1d31f Mon Sep 17 00:00:00 2001 From: Sean Parkinson Date: Mon, 14 Jan 2019 15:09:52 -0800 Subject: [PATCH] Fix SNI on client when downgrading from TLS 1.3 --- src/tls.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/tls.c b/src/tls.c index ceaf747db..eea75ae5f 100644 --- a/src/tls.c +++ b/src/tls.c @@ -9789,6 +9789,7 @@ int TLSX_Parse(WOLFSSL* ssl, byte* input, word16 length, byte msgType, #ifdef WOLFSSL_TLS13 if (IsAtLeastTLSv1_3(ssl->ctx->method->version) && msgType != client_hello && + msgType != server_hello && msgType != encrypted_extensions) { return EXT_NOT_ALLOWED; }