X-Git-Url: https://git.openssl.org/gitweb/?p=openssl.git;a=blobdiff_plain;f=ssl%2Fssl_rsa.c;h=f0a058e4bc5c2f6d74b744839051f7439479c262;hp=bf9678d118babaa17c2486aa97979e1bd86bdab1;hb=f233a9d181b5cd150322e2e10348a4c1d96fc1f3;hpb=fb29c0f0704a488b9e282caf7643cde0119223b8

diff --git a/ssl/ssl_rsa.c b/ssl/ssl_rsa.c
index bf9678d118..f0a058e4bc 100644
--- a/ssl/ssl_rsa.c
+++ b/ssl/ssl_rsa.c
@@ -758,6 +758,10 @@ static int serverinfoex_srv_add_cb(SSL *s, unsigned int ext_type,
     const unsigned char *serverinfo = NULL;
     size_t serverinfo_length = 0;
 
+    /* We only support extensions for the first Certificate */
+    if ((context & SSL_EXT_TLS1_3_CERTIFICATE) != 0 && chainidx > 0)
+        return 0;
+
     /* Is there serverinfo data for the chosen server cert? */
     if ((ssl_get_server_cert_serverinfo(s, &serverinfo,
                                         &serverinfo_length)) != 0) {