diff options
| author | Matt Caswell <matt@openssl.org> | 2019-09-05 16:43:57 +0100 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2019-09-06 10:07:11 +0100 |
| commit | debb64a0ca43969eb3f043aa8895a4faa7f12b6e (patch) | |
| tree | a6a0a771c6bd14b43467a3e76640e45c7bdf67e4 /test/recipes/03-test_internal_ec.t | |
| parent | 7e8c3381937354cf171ceaf4c69315e9a45d4858 (diff) | |
Don't send a status_request extension in a CertificateRequest message
If a TLSv1.3 server configured to respond to the status_request extension
also attempted to send a CertificateRequest then it was incorrectly
inserting a non zero length status_request extension into that message.
The TLSv1.3 RFC does allow that extension in that message but it must
always be zero length.
In fact we should not be sending the extension at all in that message
because we don't support it.
Fixes #9767
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/9780)
Diffstat (limited to 'test/recipes/03-test_internal_ec.t')
0 files changed, 0 insertions, 0 deletions