Commit fb62e47c authored by Matt Caswell's avatar Matt Caswell
Browse files

Don't send a warning alert in TLSv1.3 



TLSv1.3 ignores the alert level, so we should suppress sending of
warning only alerts.

Fixes #6211

Reviewed-by: default avatarAndy Polyakov <appro@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6370)
parent 4aa5a566

ssl/statem/extensions.c

+3 −1
Original line number Diff line number Diff line
@@ -984,6 +984,8 @@ static int final_server_name(SSL *s, unsigned int context, int sent) 
        return 0;



    case SSL_TLSEXT_ERR_ALERT_WARNING:

        /* TLSv1.3 doesn't have warning alerts so we suppress this */

        if (!SSL_IS_TLS13(s))

            ssl3_send_alert(s, SSL3_AL_WARNING, altmp);

        return 1;