CVSROOT: /cvs Module name: src Changes by: t...@cvs.openbsd.org 2021/06/08 11:41:52
Modified files:
lib/libssl : tls13_server.c
Log message:
TLSv1.3 server: avoid sending alerts in legacy records
As soon as we know that we're dealing with a TLSv1.3 client, set
the legacy version in the record layer to 0x0303 so that we send
alerts with the correct record version. Previously we would send
early alerts with a record version of 0x0300.
ok jsing
