Skip to content

Commit e1b66ca

Browse files
authored
Merge pull request #7407 from mrdeep1/key_share
Handle PSK-Only negotiation with key_share not being sent in Server Hello
2 parents cfe645c + 7b22681 commit e1b66ca

1 file changed

Lines changed: 6 additions & 0 deletions

File tree

src/tls.c

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14925,6 +14925,12 @@ int TLSX_Parse(WOLFSSL* ssl, const byte* input, word16 length, byte msgType,
1492514925
else if (!isRequest && ssl->options.haveEMS && !pendingEMS)
1492614926
ssl->options.haveEMS = 0;
1492714927
#endif
14928+
#if defined(WOLFSSL_TLS13) && !defined(NO_PSK)
14929+
if (IsAtLeastTLSv1_3(ssl->version) && msgType == server_hello &&
14930+
IS_OFF(seenType, TLSX_ToSemaphore(TLSX_KEY_SHARE))) {
14931+
ssl->options.noPskDheKe = 1;
14932+
}
14933+
#endif
1492814934

1492914935
if (ret == 0)
1493014936
ret = SNI_VERIFY_PARSE(ssl, isRequest);

0 commit comments

Comments
 (0)