]> git.ipfire.org Git - thirdparty/openssl.git/commit
Fix the alert used on a missing key_share
authorMatt Caswell <matt@openssl.org>
Wed, 31 Jul 2024 14:25:48 +0000 (15:25 +0100)
committerTomas Mraz <tomas@openssl.org>
Wed, 21 Aug 2024 13:35:51 +0000 (15:35 +0200)
commit60358f2c5e3a26e516ece2e075d0fd4198665412
treee175a37d7e445e84e814631f7f3ee97ffd4fbe4d
parent95994ded9596e920c5d81dd7b4d13d95c88be268
Fix the alert used on a missing key_share

RFC8446 requires we send an illegal_parameter alert if we don't get a
key_share back from the server and our kex_modes require one. We were
instead reporting this as missing_extension.

Fixes #25040

Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/25059)
ssl/statem/extensions.c