diff --git a/library/ssl_tls13_server.c b/library/ssl_tls13_server.c index eb0b5281af..52d2db6e77 100644 --- a/library/ssl_tls13_server.c +++ b/library/ssl_tls13_server.c @@ -1923,7 +1923,7 @@ static int ssl_tls13_process_client_hello(mbedtls_ssl_context *ssl) /* Check if server supports TLS 1.2 */ if (!mbedtls_ssl_conf_is_tls12_enabled(ssl->conf)) { MBEDTLS_SSL_DEBUG_MSG( - 1, ("Unsupported version of TLS 1.2 was received")); + 1, ("TLS 1.2 not supported.")); MBEDTLS_SSL_PEND_FATAL_ALERT( MBEDTLS_SSL_ALERT_MSG_ILLEGAL_PARAMETER, MBEDTLS_ERR_SSL_ILLEGAL_PARAMETER); diff --git a/tests/ssl-opt.sh b/tests/ssl-opt.sh index e67cf02f08..764fb4a948 100755 --- a/tests/ssl-opt.sh +++ b/tests/ssl-opt.sh @@ -11626,8 +11626,7 @@ run_test "TLS 1.3 m->m: Not supported version check: cli TLS 1.2 only, srv TLS 1 -c "supported_versions(43) extension does not exist." \ -c "A fatal alert message was received from our peer" \ -s "The SSL configuration is tls13 only" \ - -s "Unsupported version of TLS 1.2 was received" \ - -s "! mbedtls_ssl_handshake returned" + -s "TLS 1.2 not supported." requires_openssl_tls1_3_with_compatible_ephemeral requires_config_enabled MBEDTLS_DEBUG_C