search

bcgit / bc-java

Bouncy Castle Java Distribution (Mirror)
https://www.bouncycastle.org/java.html
MIT License
2.33k stars 1.14k forks source link

compressed_certificate support #1909

Open swoky opened 1 week ago

swoky commented 1 week ago

i am using bctls-jdk18on-1.78.1 to create a tls client, but it's not working when the server returned a compressed_certificate,

if i remove compress_certificate(27) from getClientExtensions method, it will be ok.

so the compress_certificate extension is not implemented ?

swoky commented 1 week ago

i use TlsExtensionsUtils.addCompressCertificateExtension(...) ,just now i checked TlsClientProtocol , found this `

    case HandshakeType.certificate_status:
    case HandshakeType.certificate_url:
    case HandshakeType.client_hello:
    case HandshakeType.client_key_exchange:
    case HandshakeType.compressed_certificate:
    case HandshakeType.end_of_early_data:
    case HandshakeType.hello_request:
    case HandshakeType.hello_verify_request:
    case HandshakeType.message_hash:
    case HandshakeType.server_hello_done:
    case HandshakeType.server_key_exchange:
    case HandshakeType.supplemental_data:
    default:
        throw new TlsFatalAlert(AlertDescription.unexpected_message);

`