commit 2bef917a3c11090d063aa2ebd59d445e185dbdb7
author Yanray Wang <yanray.wang@arm.com> Fri Dec 08 10:21:53 2023 +0800
committer Yanray Wang <yanray.wang@arm.com> Fri Dec 08 11:00:35 2023 +0800
tree 6abbd4a975347b933f9262a3129d8822189dae56
parent 177e49ad7a2e1827089ff28484b985068a626985

tls13: srv: return BAD_PROTOCOL_VERSION if chosen unsupported version

Signed-off-by: Yanray Wang <yanray.wang@arm.com>

library/ssl_tls13_server.c

diff --git a/library/ssl_tls13_server.c b/library/ssl_tls13_server.c
index 52d2db6..3baff36 100644
--- a/library/ssl_tls13_server.c
+++ b/library/ssl_tls13_server.c
@@ -1925,9 +1925,9 @@
             MBEDTLS_SSL_DEBUG_MSG(
                 1, ("TLS 1.2 not supported."));
             MBEDTLS_SSL_PEND_FATAL_ALERT(
-                MBEDTLS_SSL_ALERT_MSG_ILLEGAL_PARAMETER,
-                MBEDTLS_ERR_SSL_ILLEGAL_PARAMETER);
-            return MBEDTLS_ERR_SSL_ILLEGAL_PARAMETER;
+                MBEDTLS_SSL_ALERT_MSG_PROTOCOL_VERSION,
+                MBEDTLS_ERR_SSL_BAD_PROTOCOL_VERSION);
+            return MBEDTLS_ERR_SSL_BAD_PROTOCOL_VERSION;
         }
         ssl->keep_current_message = 1;
         ssl->tls_version = MBEDTLS_SSL_VERSION_TLS1_2;