tls-server: Determine supported/configured suites and versions early

If we don't do this, we might negotiate a TLS version for which we don't
have any suites configured, so that the cipher suite negotiation
subsequently fails.
This commit is contained in:
Tobias Brunner
2021-02-12 14:35:23 +01:00
parent 8a6edc08a4
commit 06424efa17
3 changed files with 9 additions and 7 deletions
+4
View File
@@ -235,6 +235,10 @@ static status_t process_client_hello(private_tls_server_t *this,
return NEED_MORE;
}
/* before we do anything version-related, determine our supported suites
* as that might change the min./max. versions */
this->crypto->get_cipher_suites(this->crypto, NULL);
if (ext.len)
{
extensions = bio_reader_create(ext);