From 67bc308e0406b93766e2a6b756522dc75d1154b7 Mon Sep 17 00:00:00 2001 From: Evan Klitzke Date: Sat, 23 Jun 2018 18:58:58 -0700 Subject: [PATCH] Update client SCT list during TLS 1.3 handshake, fixes #76 --- 13.go | 1 + handshake_server_test.go | 2 -- 2 files changed, 1 insertion(+), 2 deletions(-) diff --git a/13.go b/13.go index b71f0fe..d1897e8 100644 --- a/13.go +++ b/13.go @@ -953,6 +953,7 @@ func (hs *clientHandshakeState) doTLS13Handshake() error { hash := hashForSuite(hs.suite) hashSize := hash.Size() serverHello := hs.serverHello + c.scts = serverHello.scts // middlebox compatibility mode, send CCS before second flight. if _, err := c.writeRecord(recordTypeChangeCipherSpec, []byte{1}); err != nil { diff --git a/handshake_server_test.go b/handshake_server_test.go index 3882f87..8feaa98 100644 --- a/handshake_server_test.go +++ b/handshake_server_test.go @@ -394,8 +394,6 @@ func TestSCTHandshake(t *testing.T) { PrivateKey: testRSAPrivateKey, SignedCertificateTimestamps: expected, }}, - // See GH#76 - MaxVersion: VersionTLS12, } clientConfig := &Config{ InsecureSkipVerify: true,