Fix brainpool group and version downgrade handling for TLS 1.3, DTLS 1.3 and ECH by Frauschi · Pull Request #11857 · wolfSSL/wolfssl

Offer the RFC 7027 brainpool groups only when TLS 1.2 or older is reachable

Frauschi

committed

279a8df

Downgrade a DTLS 1.3 SSL when TLS 1.3 is masked off

Frauschi

committed

ee871a2

Keep the RFC 7027 brainpool groups out of the ECH inner ClientHello

Frauschi

committed

c39d83b

Address review on DTLS 1.3 downgrade and ECH outer hello

Frauschi

committed

4fcd339

Check the DTLS version mask when the handshake starts

Frauschi

committed

a289daa

Rebuild suites and cover all entry points in the DTLS mask check

Frauschi

committed

8a6a321

Apply the DTLS version mask in set_options and on every ClientHello

Frauschi

committed

1f1c30e

Start the DTLS mask walk from the method version when resuming

Frauschi

committed

a19568c

Pick only listed DTLS versions and share the server mask check

Frauschi

committed

885727e

Apply the DTLS mask when a session is set, not mid-ClientHello

Frauschi

committed

5cd7874

Add SSL_OP_NO_DTLSv1 and apply DTLS min and max proto versions

Frauschi

committed

b3068dd

Hand pre-1.3 DTLS connections to the legacy handshake

Frauschi

committed

a74729c

Let DTLS max proto and options lift an earlier cap

Frauschi

committed

a6a5205

Navigation Menu

Repository navigation

Fix brainpool group and version downgrade handling for TLS 1.3, DTLS 1.3 and ECH - #11857

Fix brainpool group and version downgrade handling for TLS 1.3, DTLS 1.3 and ECH#11857
Frauschi wants to merge 13 commits into
wolfSSL:masterfrom
Frauschi:fix-brainpool-downgrade

Commits on Oct 29, 2026

Offer the RFC 7027 brainpool groups only when TLS 1.2 or older is reachable

Downgrade a DTLS 1.3 SSL when TLS 1.3 is masked off

Keep the RFC 7027 brainpool groups out of the ECH inner ClientHello

Address review on DTLS 1.3 downgrade and ECH outer hello

Check the DTLS version mask when the handshake starts

Rebuild suites and cover all entry points in the DTLS mask check

Apply the DTLS version mask in set_options and on every ClientHello

Start the DTLS mask walk from the method version when resuming

Pick only listed DTLS versions and share the server mask check

Apply the DTLS mask when a session is set, not mid-ClientHello

Add SSL_OP_NO_DTLSv1 and apply DTLS min and max proto versions

Hand pre-1.3 DTLS connections to the legacy handshake

Let DTLS max proto and options lift an earlier cap