project-everest / mitls-fstar

Verified implementation of TLS 1.3 in F*
https://www.mitls.org
Other
173 stars 16 forks source link

Re-ordering the "supported_versions" extension in ClientHello causes internal_error alert from the server #173

Open oweisse-msft opened 7 years ago

oweisse-msft commented 7 years ago

The original order of the supported versions in the ClientHello is [ 0x7f14, 0x0303 ] (i.e., draft-20, then TLS 1.2). Reordering to [ 0x0303, 0x7f14 ] causes the server to respond with "internal_error" alert.

BarryBo commented 6 years ago

Can you check if this is still a bug, and whether it'll be caught/fixed during verification?