alert: map GNUTLS_E_UNKNOWN_COMPRESSION_ALGORITHM to illegal_parameter

This alert is more appropriate according to the tlsfuzzer test:
https://github.com/tomato42/tlsfuzzer/commit/4b6a4aa8b00cf3f3bcb2388d1bfdad985610ed1d

Signed-off-by: Daiki Ueno <dueno@redhat.com>

diff --git a/lib/alert.c b/lib/alert.c
index b9aa7bd9bae99c63cdf148c224c211ddc961d05f..a7770da6760504e10c70794deb4732ac4762642d 100644 (file)
--- a/lib/alert.c
+++ b/lib/alert.c
@@ -223,6 +223,7 @@ int gnutls_error_to_alert(int err, int *level)
        case GNUTLS_E_RECEIVED_ILLEGAL_PARAMETER:
        case GNUTLS_E_ILLEGAL_SRP_USERNAME:
        case GNUTLS_E_PK_INVALID_PUBKEY:
+       case GNUTLS_E_UNKNOWN_COMPRESSION_ALGORITHM:
                ret = GNUTLS_A_ILLEGAL_PARAMETER;
                _level = GNUTLS_AL_FATAL;
                break;
@@ -247,7 +248,6 @@ int gnutls_error_to_alert(int err, int *level)
                _level = GNUTLS_AL_FATAL;
                break;
        case GNUTLS_E_UNKNOWN_CIPHER_SUITE:
-       case GNUTLS_E_UNKNOWN_COMPRESSION_ALGORITHM:
        case GNUTLS_E_INSUFFICIENT_CREDENTIALS:
        case GNUTLS_E_NO_CIPHER_SUITES:
        case GNUTLS_E_NO_COMPRESSION_ALGORITHMS: