Merge pull request #7619 from lealem47/zd18074

Fix for TLS1.3 to 1.2 downgrade
wolfSSL · Jun 5, 2024 · 162dffb · 162dffb
2 parents 1f75d0e + d20ac2c
commit 162dffb
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/src/tls13.c b/src/tls13.c
@@ -5298,6 +5298,13 @@ int DoTls13ServerHello(WOLFSSL* ssl, const byte* input, word32* inOutIdx,
                     return ret;
             }
 #endif /* WOLFSSL_DTLS13 */
+
+#ifndef WOLFSSL_NO_TLS12
+            return DoServerHello(ssl, input, inOutIdx, helloSz);
+#else
+            SendAlert(ssl, alert_fatal, wolfssl_alert_protocol_version);
+            return VERSION_ERROR;
+#endif
         }
     }