Fix the check for suitable groups and TLSv1.3
authorMatt Caswell <matt@openssl.org>
Thu, 4 Mar 2021 16:33:26 +0000 (16:33 +0000)
committerMatt Caswell <matt@openssl.org>
Mon, 8 Mar 2021 15:32:04 +0000 (15:32 +0000)
commit9afc6c54314f94c0dcb4168d01554497bfaeae4f
tree57fd8eedcd2c24b41011d3c938cfd23e5cea800c
parent7bc0fdd3fd4535e06c35b92d71afab9a6de94cc5
Fix the check for suitable groups and TLSv1.3

If we have TLSv1.3 enabled then we must have at least one TLSv1.3 capable
group available. This check was not always working

Reviewed-by: Ben Kaduk <kaduk@mit.edu>
(Merged from https://github.com/openssl/openssl/pull/14430)
ssl/statem/extensions_clnt.c
test/ssl-tests/20-cert-select.cnf
test/ssl-tests/20-cert-select.cnf.in