Restrict announced hash value for PSK

oracle / ktls-utils

TLS handshake utilities for in-kernel TLS consumers

GNU General Public License v2.0

28 stars 15 forks source link

Restrict announced hash value for PSK #48

Closed hreinecke closed 7 months ago

hreinecke commented 7 months ago

PSK ClientHello only sends a single PSK value, which matches only to one hash algorithm. So we should restrict the announced hash values to only the correct one.