8262509: JSSE Server should check the legacy version in TLSv1.3 Clien…

…tHello Reviewed-by: xuelei, wetmore
openjdk · Mar 1, 2021 · 353416f · 353416f
1 parent 642f45f
commit 353416f
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/src/java.base/share/classes/sun/security/ssl/ClientHello.java b/src/java.base/share/classes/sun/security/ssl/ClientHello.java
@@ -1149,6 +1149,11 @@ public void consume(ConnectionContext context,
                         "Received unexpected renegotiation handshake message");
             }
 
+            if (clientHello.clientVersion != ProtocolVersion.TLS12.id) {
+                throw shc.conContext.fatal(Alert.PROTOCOL_VERSION,
+                        "The ClientHello.legacy_version field is not TLS 1.2");
+            }
+
             // The client may send a dummy change_cipher_spec record
             // immediately after the first ClientHello.
             shc.conContext.consumers.putIfAbsent(