If not sending key_share (no TLSv1.3), return appropriately. This fixes an issue raised in PR #4964 by kaduk. Reviewed-by: Ben Kaduk <kaduk@mit.edu> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/5491)
diff --git a/ssl/statem/extensions_clnt.c b/ssl/statem/extensions_clnt.c index d569f3b..fa6c65b 100644 --- a/ssl/statem/extensions_clnt.c +++ b/ssl/statem/extensions_clnt.c
@@ -705,9 +705,10 @@ ERR_R_INTERNAL_ERROR); return EXT_RETURN_FAIL; } -#endif - return EXT_RETURN_SENT; +#else + return EXT_RETURN_NOT_SENT; +#endif } EXT_RETURN tls_construct_ctos_cookie(SSL *s, WPACKET *pkt, unsigned int context,