diff options
| author | tb <> | 2021-02-22 16:13:31 +0000 |
|---|---|---|
| committer | tb <> | 2021-02-22 16:13:31 +0000 |
| commit | 94227aadd673de7514422a4c5dc686cac4435f66 (patch) | |
| tree | 54ea595d414b9275fb7968239c09513df65a5a86 /src/lib/libssl/ssl_methods.c | |
| parent | 31c2675f96aa093b3ad5ba68f18a9459299bb76f (diff) | |
| download | openbsd-94227aadd673de7514422a4c5dc686cac4435f66.tar.gz openbsd-94227aadd673de7514422a4c5dc686cac4435f66.tar.bz2 openbsd-94227aadd673de7514422a4c5dc686cac4435f66.zip | |
Simplify version checks in the TLSv1.3 client
Ensure that the server announced TLSv1.3 (and nothing higher) in the
supported_versions extension. In that case, the legacy_version must
be TLSv1.2 according to RFC 8446, 4.1.3 and 4.2.1.
This commit also removes some unreachable code which is a remnant of
very early TLSv1.3 code from before the legacy fallback was introduced.
Simplify a few checks and adjust some comments nearby.
ok jsing
Diffstat (limited to 'src/lib/libssl/ssl_methods.c')
0 files changed, 0 insertions, 0 deletions