Skip to content

Commit 8b00ab4

Browse files
committed
Add a few extension numbers in the server hello
Issue #2686 showed a server which listed an unknown extension number from RFC 8446. THis PR adds this number and a few (later) ones. It just lists them when detected in `parse_tls_serverhello()` See also https://www.iana.org/assignments/tls-extensiontype-values/tls-extensiontype-values.xhtml
1 parent 830af44 commit 8b00ab4

1 file changed

Lines changed: 4 additions & 0 deletions

File tree

testssl.sh

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14861,6 +14861,10 @@ parse_tls_serverhello() {
1486114861
002F) tls_extensions+="TLS server extension \"certificate authorities\" (id=47), len=$extension_len\n" ;;
1486214862
0030) tls_extensions+="TLS server extension \"oid filters\" (id=48), len=$extension_len\n" ;;
1486314863
0031) tls_extensions+="TLS server extension \"post handshake auth\" (id=49), len=$extension_len\n" ;;
14864+
0032) tls_extensions+="TLS server extension \"signature algorithms cert\" (id=50), len=$extension_len\n" ;;
14865+
0034) tls_extensions+="TLS server extension \"transparency info \" (id=52), len=$extension_len\n" ;;
14866+
# 54,55,56 (x36 to x38) is DTLS
14867+
003A) tls_extensions+="TLS server extension \"ticket request \" (id=58), len=$extension_len\n" ;;
1486414868
3374) tls_extensions+="TLS server extension \"next protocol\" (id=13172), len=$extension_len\n"
1486514869
if [[ "$process_full" =~ all ]]; then
1486614870
local -i protocol_len

0 commit comments

Comments
 (0)