denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

libtls: Fix encoding of TLS 1.3 certificate extension as server

Browse Source 
Same as 9664ef4ba6 ("libtls: Fixed encoding of TLS 1.3 certificate
extension") but for the server.
This commit is contained in:
Tobias Brunner
2022-09-06 09:33:00 +02:00
parent 023070b6d0
commit 88859b506c
1 changed files with 12 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libtls/tls_server.c
+12 -5
View File
@@ -1327,11 +1327,12 @@ static status_t send_certificate(private_tls_server_t *this,
cert->get_subject(cert)); cert->get_subject(cert));
certs->write_data24(certs, data); certs->write_data24(certs, data);
free(data.ptr); free(data.ptr);
}
/* extensions see RFC 8446, section 4.4.2 */ /* extensions see RFC 8446, section 4.4.2 */
if (this->tls->get_version_max(this->tls) > TLS_1_2) if (this->tls->get_version_max(this->tls) > TLS_1_2)
{ {
certs->write_uint16(certs, 0); certs->write_uint16(certs, 0);
}
} }
} }
enumerator = this->server_auth->create_enumerator(this->server_auth); enumerator = this->server_auth->create_enumerator(this->server_auth);
@@ -1345,6 +1346,12 @@ static status_t send_certificate(private_tls_server_t *this,
cert->get_subject(cert)); cert->get_subject(cert));
certs->write_data24(certs, data); certs->write_data24(certs, data);
free(data.ptr); free(data.ptr);
/* extensions see RFC 8446, section 4.4.2 */
if (this->tls->get_version_max(this->tls) > TLS_1_2)
{
certs->write_uint16(certs, 0);
}
} }
} }
} }