[openssl/openssl] bd1648: Do not send an empty supported groups extension

Tomas Mraz noreply at reply.github.openssl.org
Thu May 5 12:05:49 UTC 2022


  Branch: refs/heads/OpenSSL_1_1_1-stable
  Home:   https://github.openssl.org/openssl/openssl
  Commit: bd164884f258d99ca876f6cdcdf9bd0dcceee6ad
      https://github.openssl.org/openssl/openssl/commit/bd164884f258d99ca876f6cdcdf9bd0dcceee6ad
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2022-05-05 (Thu, 05 May 2022)

  Changed paths:
    M CHANGES
    M ssl/statem/extensions_clnt.c

  Log Message:
  -----------
  Do not send an empty supported groups extension

This allows handshake to proceed if the maximum TLS version enabled is <1.3

Fixes #13583

Reviewed-by: Paul Dale <pauli at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/18213)


  Commit: c7d6c08290b67cbeef2b4f636f04788ea405520a
      https://github.openssl.org/openssl/openssl/commit/c7d6c08290b67cbeef2b4f636f04788ea405520a
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2022-05-05 (Thu, 05 May 2022)

  Changed paths:
    M test/recipes/80-test_ssl_new.t
    R test/ssl-tests/16-certstatus.conf
    A test/ssl-tests/30-supported-groups.conf
    A test/ssl-tests/30-supported-groups.conf.in

  Log Message:
  -----------
  Add test for empty supported-groups extension

Reviewed-by: Paul Dale <pauli at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/18213)


Compare: https://github.openssl.org/openssl/openssl/compare/ac2d4cb656b3...c7d6c08290b6


More information about the openssl-commits mailing list