From e7dd763e513f576b8e4e32bb5d08abc37bb08a40 Mon Sep 17 00:00:00 2001 From: Matt Caswell Date: Mon, 13 Nov 2017 15:01:07 +0000 Subject: [PATCH] Make sure supported_versions appears in an HRR too Reviewed-by: Ben Kaduk (Merged from https://github.com/openssl/openssl/pull/4701) --- ssl/statem/extensions.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/ssl/statem/extensions.c b/ssl/statem/extensions.c index 026126d4d8..28f7ada55a 100644 --- a/ssl/statem/extensions.c +++ b/ssl/statem/extensions.c @@ -263,7 +263,8 @@ static const EXTENSION_DEFINITION ext_defs[] = { { TLSEXT_TYPE_supported_versions, SSL_EXT_CLIENT_HELLO | SSL_EXT_TLS1_2_SERVER_HELLO - | SSL_EXT_TLS1_3_SERVER_HELLO | SSL_EXT_TLS_IMPLEMENTATION_ONLY, + | SSL_EXT_TLS1_3_SERVER_HELLO | SSL_EXT_TLS1_3_HELLO_RETRY_REQUEST + | SSL_EXT_TLS_IMPLEMENTATION_ONLY, NULL, /* Processed inline as part of version selection */ NULL, tls_parse_stoc_supported_versions, -- 2.25.1