Re: [TLS] Warning alert before TLS 1.3 ServerHello

[Eric Rescorla <[e-mail]>]

But it actually sends an SH? That seems odd and kind of an ambiguous point
in the spec.

-Ekr


On Wed, May 9, 2018 at 10:14 AM, Roelof duToit <[e-mail]> wrote:

> In one of our tests OpenSSL 1.1.1-dev sends an unrecognized_name warning
> alert before a TLS 1.3 (draft 26) ServerHello.  Alert level is supposed to
> be implicit in TLS 1.3, but in this case it is ambiguous.  Should it even
> be considered a “TLS 1.3 alert” given that it arrives before the protocol
> version is confirmed?
>
> TLS 1.3 draft section 6 states that "All the alerts listed in Section 6.2
> MUST be sent with AlertLevel=fatal and MUST be treated as error alerts
> regardless of the AlertLevel in the message”.   Is the client supposed to
> remember that it received a warning level alert and terminate after parsing
> the ServerHello?
>
> —Roelof
>
>
> _______________________________________________
> TLS mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/tls
>