Fix mbedtls_ssl_get_version() for TLSv1.3
Test it in ssl-opt.sh. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
This commit is contained in:
parent
1255b0de98
commit
c63a1e0e15
3 changed files with 5 additions and 1 deletions
2
ChangeLog.d/ssl_get_version_1_3.txt
Normal file
2
ChangeLog.d/ssl_get_version_1_3.txt
Normal file
|
@ -0,0 +1,2 @@
|
||||||
|
Bugfix
|
||||||
|
* Fix mbedtls_ssl_get_version() not reporting TLSv1.3. Fixes #5406.
|
|
@ -2241,7 +2241,8 @@ const char *mbedtls_ssl_get_version( const mbedtls_ssl_context *ssl )
|
||||||
{
|
{
|
||||||
case MBEDTLS_SSL_MINOR_VERSION_3:
|
case MBEDTLS_SSL_MINOR_VERSION_3:
|
||||||
return( "TLSv1.2" );
|
return( "TLSv1.2" );
|
||||||
|
case MBEDTLS_SSL_MINOR_VERSION_4:
|
||||||
|
return( "TLSv1.3" );
|
||||||
default:
|
default:
|
||||||
return( "unknown" );
|
return( "unknown" );
|
||||||
}
|
}
|
||||||
|
|
|
@ -9668,6 +9668,7 @@ run_test "TLS 1.3: minimal feature sets - openssl" \
|
||||||
-c "<= parse certificate verify" \
|
-c "<= parse certificate verify" \
|
||||||
-c "mbedtls_ssl_tls13_process_certificate_verify() returned 0" \
|
-c "mbedtls_ssl_tls13_process_certificate_verify() returned 0" \
|
||||||
-c "<= parse finished message" \
|
-c "<= parse finished message" \
|
||||||
|
-c "Protocol is TLSv1.3" \
|
||||||
-c "HTTP/1.0 200 ok"
|
-c "HTTP/1.0 200 ok"
|
||||||
|
|
||||||
requires_gnutls_tls1_3
|
requires_gnutls_tls1_3
|
||||||
|
|
Loading…
Reference in a new issue