Fix for TLS1.3 to 1.2 downgrade

lealem47 · lealem47 · commit d20ac2ce42d7 · 2024-06-05T11:26:10.000-06:00
diff --git a/src/tls13.c b/src/tls13.c
@@ -5298,6 +5298,13 @@ int DoTls13ServerHello(WOLFSSL* ssl, const byte* input, word32* inOutIdx,
                     return ret;
             }
 #endif /* WOLFSSL_DTLS13 */
+
+#ifndef WOLFSSL_NO_TLS12
+            return DoServerHello(ssl, input, inOutIdx, helloSz);
+#else
+            SendAlert(ssl, alert_fatal, wolfssl_alert_protocol_version);
+            return VERSION_ERROR;
+#endif
         }
     }
 

Original file line number	Diff line number	Diff line change
`@@ -5298,6 +5298,13 @@ int DoTls13ServerHello(WOLFSSL* ssl, const byte* input, word32* inOutIdx,`
`5298`	`5298`	`return ret;`
`5299`	`5299`	`}`
`5300`	`5300`	`#endif /* WOLFSSL_DTLS13 */`
	`5301`	`+`
	`5302`	`+#ifndef WOLFSSL_NO_TLS12`
	`5303`	`+ return DoServerHello(ssl, input, inOutIdx, helloSz);`
	`5304`	`+#else`
	`5305`	`+ SendAlert(ssl, alert_fatal, wolfssl_alert_protocol_version);`
	`5306`	`+ return VERSION_ERROR;`
	`5307`	`+#endif`
`5301`	`5308`	`}`
`5302`	`5309`	`}`
`5303`	`5310`