abc/GmSSL
1
0
Fork 0
mirror of https://github.com/guanzhi/GmSSL.git synced 2026-06-29 01:03:38 +08:00
Code Issues Packages Projects Releases Wiki Activity

Update TLS 1.3

Browse Source 
Cross-validation with openssl s_client.
HelloRetryReqeust not OK.
This commit is contained in:
Zhi Guan
2026-05-21 15:21:41 +08:00
parent 431a22e2e9
commit 020896dbd0
5 changed files with 39 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
src/tls13.c
View File

@@ -1706,12 +1706,13 @@ int tls13_key_share_entry_from_bytes(int *group, const uint8_t **key_exchange, s
}
*group = named_curve;
if (!tls_named_curve_name(named_curve)) {
error_print();
return -1;
warning_print();
//return -1;
}
if (*key_exchange_len != 65) {
error_print();
return -1;
// 只有SM2/P256才满足，但是对方可能发送其他类型的key_share
warning_print(); // FIXME:
//return -1;
}
return 1;
}
@@ -2286,7 +2287,7 @@ int tls13_client_hello_print(FILE *fp, int fmt, int ind, const uint8_t *d, size_
break;
default:
format_bytes(fp, fmt, ind + 4, "data", ext_data, ext_datalen);
error_print();
//error_print();
//return -1;
}
}
@@ -6863,9 +6864,9 @@ int tls13_recv_client_hello(TLS_CONNECT *conn)
case TLS_extension_cookie:
error_print();
default:
error_print();
tls13_send_alert(conn, TLS_alert_illegal_parameter);
return -1;
warning_print();
//tls13_send_alert(conn, TLS_alert_illegal_parameter);
//return -1;
}
}
@@ -7003,6 +7004,15 @@ int tls13_recv_client_hello(TLS_CONNECT *conn)
int common_cipher_suites[4];
size_t common_cipher_suites_cnt;
if (!conn->ctx->cert_chains) {
error_print();
return -1;
}
if (!conn->ctx->cert_chains_len) {
error_print();
return -1;
}
if ((ret = tls13_cert_chains_select(
conn->ctx->cert_chains, conn->ctx->cert_chains_len,
common_sig_algs, common_sig_algs_cnt,