7 Commits

Author	SHA1	Message	Date
Sean Parkinson	b766f11e7b	TLS 1.3, plaintext alert: ignore when expecting encrypted ... In TLS 1.3, ignore valid unencrypted alerts that appear after encryption has started. Only ignore WOLFSSL_ALERT_COUNT_MAX-1 alerts.	2025-12-23 09:09:06 +10:00
Juliusz Sosinowicz	f61bfd7805	Check KeyShare after HRR	2025-12-17 10:27:04 +01:00
Sean Parkinson	d3863e5fa3	TLS 1.3: duplicate extension alert code fix ... The specification states to return illegal_parameter when a message is syntactically correct but semantically invalid. (RFC 8446 section 6, Paragraph 5)	2025-12-15 10:00:56 -08:00
Sean Parkinson	44be44a509	TLS 1.3 missing extension: return correct alert code ... Change TLS 1.3 handling to return missing_extension alert code when - KeyShare is present but SupportedGroups is missing and - SupportedGroups is present but KeyShare is missing Added tests for this.	2025-12-15 09:07:13 +10:00
Juliusz Sosinowicz	c14b1a0504	Validate cipher suite after HelloRetryRequest ... - Add validation to ensure the cipher suite in the ServerHello matches the one specified in the HelloRetryRequest. - test_TLSX_CA_NAMES_bad_extension: use the same ciphersuite in HRR and SH	2025-10-29 13:14:50 +01:00
Juliusz Sosinowicz	f798a585d9	Abort connection if we are about to send the same CH	2025-09-26 12:08:53 +02:00
Sean Parkinson	115d4d88c0	api.c: pull out TLS 1.3 specific tests	2025-08-26 09:05:46 +10:00