Fix for TLS1.3 to 1.2 downgrade

wolfSSL · Jun 5, 2024 · d20ac2c · d20ac2c
1 parent 0397d90
commit d20ac2c
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/src/tls13.c b/src/tls13.c
@@ -5298,6 +5298,13 @@ int DoTls13ServerHello(WOLFSSL* ssl, const byte* input, word32* inOutIdx,
                     return ret;
             }
 #endif /* WOLFSSL_DTLS13 */
+
+#ifndef WOLFSSL_NO_TLS12
+            return DoServerHello(ssl, input, inOutIdx, helloSz);
+#else
+            SendAlert(ssl, alert_fatal, wolfssl_alert_protocol_version);
+            return VERSION_ERROR;
+#endif
         }
     }