Skip to content
Browse files
8262509: JSSE Server should check the legacy version in TLSv1.3 Clien…

Reviewed-by: xuelei, wetmore
  • Loading branch information
John Jiang committed Mar 1, 2021
1 parent 642f45f commit 353416ffcaa12d79013e6f9d03371bf86d0f671b
Showing 1 changed file with 5 additions and 0 deletions.
@@ -1149,6 +1149,11 @@ public void consume(ConnectionContext context,
"Received unexpected renegotiation handshake message");

if (clientHello.clientVersion != {
throw shc.conContext.fatal(Alert.PROTOCOL_VERSION,
"The ClientHello.legacy_version field is not TLS 1.2");

// The client may send a dummy change_cipher_spec record
// immediately after the first ClientHello.

0 comments on commit 353416f

Please sign in to comment.