mirror/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-04-16 08:42:50 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix mbedtls_ssl_get_version() for TLSv1.3

Browse Source 
Test it in ssl-opt.sh.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
This commit is contained in:
Gilles Peskine 2022-01-13 01:10:24 +01:00
parent 1255b0de98
commit c63a1e0e15
3 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ChangeLog.d/ssl_get_version_1_3.txt Normal file
View File

@ -0,0 +1,2 @@
Bugfix
* Fix mbedtls_ssl_get_version() not reporting TLSv1.3. Fixes #5406.

3
library/ssl_tls.c
View File

@ -2241,7 +2241,8 @@ const char *mbedtls_ssl_get_version( const mbedtls_ssl_context *ssl )
{ {
case MBEDTLS_SSL_MINOR_VERSION_3: case MBEDTLS_SSL_MINOR_VERSION_3:
return( "TLSv1.2" ); return( "TLSv1.2" );
case MBEDTLS_SSL_MINOR_VERSION_4:
return( "TLSv1.3" );
default: default:
return( "unknown" ); return( "unknown" );
} }

1
tests/ssl-opt.sh
View File

@ -9668,6 +9668,7 @@ run_test "TLS 1.3: minimal feature sets - openssl" \
-c "<= parse certificate verify" \ -c "<= parse certificate verify" \
-c "mbedtls_ssl_tls13_process_certificate_verify() returned 0" \ -c "mbedtls_ssl_tls13_process_certificate_verify() returned 0" \
-c "<= parse finished message" \ -c "<= parse finished message" \
-c "Protocol is TLSv1.3" \
-c "HTTP/1.0 200 ok" -c "HTTP/1.0 200 ok"
requires_gnutls_tls1_3 requires_gnutls_tls1_3