fix: alert illegal_extension is added due to rfc, when uncompressed f…

…ormat is not found; alert decode_error is added when the list of ecc extenison is empty
tlsfuzzer · Oct 30, 2024 · 88e049e · 88e049e
1 parent 317cca7
commit 88e049e
Showing 1 changed file with 17 additions and 0 deletions.
diff --git a/tlslite/tlsconnection.py b/tlslite/tlsconnection.py
@@ -4409,6 +4409,23 @@ def _serverCertKeyExchange(self, clientHello, serverHello, sigHashAlg,
                     AlertDescription.insufficient_security,
                     str(alert)):
                 yield result
+        except DecodeError as alert:
+            for result in self._sendError(
+                    AlertDescription.illegal_parameter,
+                    str(alert)):
+                yield result
+        except TLSIllegalParameterException as alert:
+            alert = Alert().create(AlertDescription.illegal_parameter,
+                                           AlertLevel.fatal)
+            for result in self._sendMsg(alert):
+                yield result
+            raise
+        except TLSDecodeError as alert:
+            alert = Alert().create(AlertDescription.decode_error,
+                                           AlertLevel.fatal)
+            for result in self._sendMsg(alert):
+                yield result
+            raise
         if serverKeyExchange is not None:
             msgs.append(serverKeyExchange)
         if reqCert: