• M
    Allow a missing sig algs extension if resuming · 108d45df
    Matt Caswell 提交于
    The current TLSv1.3 spec says:
    
    'If a server is authenticating via a certificate and the client has not
    sent a "signature_algorithms" extension, then the server MUST abort the
    handshake with a "missing_extension" alert (see Section 8.2).'
    
    If we are resuming then we are not "authenticating via a certificate" but
    we were still aborting with the missing_extension alert if sig algs was
    missing.
    
    This commit ensures that we only send the alert if we are not resuming.
    Reviewed-by: NRich Salz <rsalz@openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/3478)
    108d45df
extensions.c 47.2 KB