From 5acce3f58ab8ea3f51a29f1fd7044fcf134f5b06 Mon Sep 17 00:00:00 2001 From: beck <> Date: Mon, 20 Jan 2020 22:04:17 +0000 Subject: Add alerts to the tls 1.3 record layer and handshake layer ok jsing@, inoguchi@, tb@ --- src/lib/libssl/tls13_handshake.c | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) (limited to 'src/lib/libssl/tls13_handshake.c') diff --git a/src/lib/libssl/tls13_handshake.c b/src/lib/libssl/tls13_handshake.c index 9f087888e1..c86187caec 100644 --- a/src/lib/libssl/tls13_handshake.c +++ b/src/lib/libssl/tls13_handshake.c @@ -1,4 +1,4 @@ -/* $OpenBSD: tls13_handshake.c,v 1.36 2019/11/17 06:43:46 jsing Exp $ */ +/* $OpenBSD: tls13_handshake.c,v 1.37 2020/01/20 22:04:17 beck Exp $ */ /* * Copyright (c) 2018-2019 Theo Buehler * Copyright (c) 2019 Joel Sing @@ -382,10 +382,8 @@ tls13_handshake_recv_action(struct tls13_ctx *ctx, msg_type = tls13_handshake_msg_type(ctx->hs_msg); if (msg_type != action->handshake_type && (msg_type != TLS13_MT_CERTIFICATE || - action->handshake_type != TLS13_MT_CERTIFICATE_REQUEST)) { - /* XXX send unexpected message alert */ - return TLS13_IO_FAILURE; - } + action->handshake_type != TLS13_MT_CERTIFICATE_REQUEST)) + return tls13_send_alert(ctx->rl, SSL_AD_UNEXPECTED_MESSAGE); /* XXX provide CBS and check all consumed. */ ret = TLS13_IO_FAILURE; -- cgit v1.2.3-55-g6feb