Fix SNI on client when downgrading from TLS 1.3
This commit is contained in:
parent
406d2ceb6b
commit
53ad7728bf
@ -9789,6 +9789,7 @@ int TLSX_Parse(WOLFSSL* ssl, byte* input, word16 length, byte msgType,
|
|||||||
#ifdef WOLFSSL_TLS13
|
#ifdef WOLFSSL_TLS13
|
||||||
if (IsAtLeastTLSv1_3(ssl->ctx->method->version) &&
|
if (IsAtLeastTLSv1_3(ssl->ctx->method->version) &&
|
||||||
msgType != client_hello &&
|
msgType != client_hello &&
|
||||||
|
msgType != server_hello &&
|
||||||
msgType != encrypted_extensions) {
|
msgType != encrypted_extensions) {
|
||||||
return EXT_NOT_ALLOWED;
|
return EXT_NOT_ALLOWED;
|
||||||
}
|
}
|
||||||
|
Loading…
Reference in New Issue
Block a user