From: jsing Date: Sun, 17 Jul 2022 14:41:27 +0000 (+0000) Subject: Correct TLSEXT_TYPE_quic_transport_parameters message types. X-Git-Url: http://artulab.com/gitweb/?a=commitdiff_plain;h=3293bcf7c592590a2d4b34dd11485cd1836fd475;p=openbsd Correct TLSEXT_TYPE_quic_transport_parameters message types. Per RFC 9001, TLSEXT_TYPE_quic_transport_parameters may only appear in ClientHello and EncryptedExtensions (not ServerHello). ok beck@ tb@ --- diff --git a/lib/libssl/ssl_tlsext.c b/lib/libssl/ssl_tlsext.c index fa1eef35874..a7c8f2d61d0 100644 --- a/lib/libssl/ssl_tlsext.c +++ b/lib/libssl/ssl_tlsext.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ssl_tlsext.c,v 1.119 2022/07/02 16:31:04 tb Exp $ */ +/* $OpenBSD: ssl_tlsext.c,v 1.120 2022/07/17 14:41:27 jsing Exp $ */ /* * Copyright (c) 2016, 2017, 2019 Joel Sing * Copyright (c) 2017 Doug Hogan @@ -2245,7 +2245,7 @@ static const struct tls_extension tls_extensions[] = { #endif /* OPENSSL_NO_SRTP */ { .type = TLSEXT_TYPE_quic_transport_parameters, - .messages = SSL_TLSEXT_MSG_CH | SSL_TLSEXT_MSG_SH, + .messages = SSL_TLSEXT_MSG_CH | SSL_TLSEXT_MSG_EE, .client = { .needs = tlsext_quic_transport_parameters_client_needs, .build = tlsext_quic_transport_parameters_client_build,