CVSROOT: /cvs
Module name: src
Changes by: t...@cvs.openbsd.org 2021/06/08 12:05:47
Modified files:
lib/libssl : tls13_record_layer.c
Log message:
Ignore the record version for early alerts
On receiving the first flight from the peer, we do not yet know if
we are using TLSv1.3. In particular, we might get an alert record
with record version 0x0300 from a pre-TLSv1.2 peer in response to
our client hello. Ignore the record version instead of sending a
protocol version alert in that situtation. This may also be hit
when talking to a LibreSSL 3.3 server with an illegal SNI.
Part of an issue reported by danj.
ok jsing
