record: any alert is fatal under TLS1.3

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

diff --git a/lib/record.c b/lib/record.c
index 44585078f9ec7c0ff8e7bd1f08f4a50811c9d661..039ce0f1406c816cfb969d0e128050896878f33e 100644 (file)
--- a/lib/record.c
+++ b/lib/record.c
@@ -810,7 +810,7 @@ record_add_to_buffers(gnutls_session_t session,
                                 */
                                gnutls_assert();
                                ret = GNUTLS_E_WARNING_ALERT_RECEIVED;
-                               if (bufel->msg.data[0] == GNUTLS_AL_FATAL) {
+                               if (ver->tls13_sem || bufel->msg.data[0] == GNUTLS_AL_FATAL) {
                                        session_unresumable(session);
                                        session_invalidate(session);
                                        ret =