Commit bcbd701
committed
Support DTLS1.3 downgrade when server sends multiple handshakes in packet
If the server sends Server Hello, Server Key Exchange and Server Hello Done
in a single DTLS packet, but for DTLS1.2 in response to a client DTLS1.3
request, then FIRST_REPLAY state does not occur until the server re-sends
the packet. At this point wolfSSLconnect() gets used and all bursts into
life.
When processing handshakes in wolfSSL_connect_TLSv13() for case
HELLO_AGAIN_REPLY, downgrade to using wolfSSLconnect() to continue
processing the remaining handshakes in the packet.
Found when using Mbed TLS for the server.1 parent 54370cc commit bcbd701
1 file changed
Lines changed: 8 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
13086 | 13086 | | |
13087 | 13087 | | |
13088 | 13088 | | |
| 13089 | + | |
| 13090 | + | |
| 13091 | + | |
| 13092 | + | |
| 13093 | + | |
| 13094 | + | |
| 13095 | + | |
| 13096 | + | |
13089 | 13097 | | |
13090 | 13098 | | |
13091 | 13099 | | |
| |||
0 commit comments