git: 9front

Info  •  Files  •  Log  •  Branches

libsec: handle TLS 1.2 changes in CertificateRequest message

--- a/sys/src/libsec/port/tlshand.c

+++ b/sys/src/libsec/port/tlshand.c

@@ -1614,6 +1614,19 @@

 		m->u.certificateRequest.types = makebytes(p, nn);

 		p += nn;

 		n -= nn;

+		if(c->version >= TLS12Version){

+			/* skip supported_signature_algorithms */

+			if(n < 2)

+				goto Short;

+			nn = get16(p);

+			p += 2;

+			n -= 2;

+			if(nn > n)

+				goto Short;

+			p += nn;

+			n -= nn;

+

+		}

 		if(n < 2)

 			goto Short;

 		nn = get16(p);

-- 

⑨