- #In TLS1.3 there are 4 messages with extensions (i.e. 2 extra) and no
- #renegotiations: 1 ClientHello, 1 ServerHello, 1 EncryptedExtensions,
- #1 Certificate
- $numtests += 2 if ($proxy->is_tls13());
- #Except in Client auth where we have an extra Certificate message, and
- #one extension gets checked twice (once in each Certificate message)
- $numtests += 2 if ($proxy->is_tls13()
- && ($handtype & CLIENT_AUTH_HANDSHAKE) != 0);
- #And in a resumption handshake we don't get Certificate at all and the
- #Certificate extension doesn't get checked at all
- $numtests -= 2 if ($proxy->is_tls13()
- && ($handtype & RESUME_HANDSHAKE) != 0);