From: Frederik Wedel-Heinen <frederik.wedel-heinen@dencrypt.dk>
Date: Tue, 23 Jan 2024 14:18:51 +0000 (+0100)
Subject: Handle DTLS 1.2 in CertificateVerify messages
X-Git-Tag: openssl-3.3.0-alpha1~139
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=3b3a00b62aab1e1016c2ad7f026b11cd3d0bc3b7;p=thirdparty%2Fopenssl.git

Handle DTLS 1.2 in CertificateVerify messages

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23319)
---

diff --git a/util/perl/TLSProxy/CertificateVerify.pm b/util/perl/TLSProxy/CertificateVerify.pm
index 95922729918..c4874c89e20 100644
--- a/util/perl/TLSProxy/CertificateVerify.pm
+++ b/util/perl/TLSProxy/CertificateVerify.pm
@@ -52,7 +52,8 @@ sub parse
     my $record = ${$self->records}[0];
 
     if (TLSProxy::Proxy->is_tls13()
-            || $record->version() == TLSProxy::Record::VERS_TLS_1_2) {
+            || $record->version() == TLSProxy::Record::VERS_TLS_1_2
+            || $record->version() == TLSProxy::Record::VERS_DTLS_1_2) {
         $sigalg = unpack('n', $remdata);
         $remdata = substr($remdata, 2);
     }