Skip to content
This repository has been archived by the owner. It is now read-only.
Permalink
Browse files
8262509: JSSE Server should check the legacy version in TLSv1.3 Clien…
…tHello

Reviewed-by: xuelei, wetmore
  • Loading branch information
John Jiang committed Mar 1, 2021
1 parent 642f45f commit 353416ffcaa12d79013e6f9d03371bf86d0f671b
Showing with 5 additions and 0 deletions.
  1. +5 −0 src/java.base/share/classes/sun/security/ssl/ClientHello.java
@@ -1149,6 +1149,11 @@ public void consume(ConnectionContext context,
"Received unexpected renegotiation handshake message");
}

if (clientHello.clientVersion != ProtocolVersion.TLS12.id) {
throw shc.conContext.fatal(Alert.PROTOCOL_VERSION,
"The ClientHello.legacy_version field is not TLS 1.2");
}

// The client may send a dummy change_cipher_spec record
// immediately after the first ClientHello.
shc.conContext.consumers.putIfAbsent(

0 comments on commit 353416f

Please sign in to comment.