libssl: use correct alert for key_share without supported_groups

Processing the key_share extension requires a supported_groups extension.
RFC 9846, section 9.2 explicitly mandates a missing_extension alert in
this situation, so use that instead of illegal_parameter.

We do have code in tls13_client_hello_required_extensions() implementing
the requirements on extensions of the relevant paragraph of that section
with the corrrect alerts.  The error in the extension processing happens
before hitting these checks in this particular case.

Reported by Tom Gouville of the tlspuffin team as part of
https://github.com/libressl/portable/issues/1279

ok jsing kenjiro

0 files changed, 0 insertions, 0 deletions