tls-server: Determine supported/configured suites and versions early
If we don't do this, we might negotiate a TLS version for which we don't have any suites configured, so that the cipher suite negotiation subsequently fails.
This commit is contained in:
@@ -235,6 +235,10 @@ static status_t process_client_hello(private_tls_server_t *this,
|
||||
return NEED_MORE;
|
||||
}
|
||||
|
||||
/* before we do anything version-related, determine our supported suites
|
||||
* as that might change the min./max. versions */
|
||||
this->crypto->get_cipher_suites(this->crypto, NULL);
|
||||
|
||||
if (ext.len)
|
||||
{
|
||||
extensions = bio_reader_create(ext);
|
||||
|
||||
Reference in New Issue
Block a user