Skip to content

Ensure same supported_groups before/after HRR - #525

Closed
vdukhovni wants to merge 1 commit into
haskell-tls:mainfrom
vdukhovni:fix-hrr-supported_groups
Closed

Ensure same supported_groups before/after HRR#525
vdukhovni wants to merge 1 commit into
haskell-tls:mainfrom
vdukhovni:fix-hrr-supported_groups

Conversation

@vdukhovni

Copy link
Copy Markdown
Collaborator

As required by RFC8446 Section 4.1.2

Fixes: #524

As required by RFC8446 Section 4.1.2
-- RFC 8446 Sec 4.1.4: the selected_group MUST be in supported_groups
-- and MUST NOT already have been offered in the initial key_share.
| selectedGroup `elem` groupsSupported
, selectedGroup `notElem` groupsSelected -> do

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would like to use && instead of , here.
I will take care of this by myself.

@kazu-yamamoto
kazu-yamamoto self-requested a review April 15, 2026 02:09

@kazu-yamamoto kazu-yamamoto left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

kazu-yamamoto added a commit to kazu-yamamoto/hs-tls that referenced this pull request Apr 15, 2026
@kazu-yamamoto

Copy link
Copy Markdown
Collaborator

Rebased and merged.
v2.4.1 has been released.
Thank you for your contribution!

@vdukhovni

Copy link
Copy Markdown
Collaborator Author

Rebased and merged. v2.4.1 has been released. Thank you for your contribution!

Many thanks for adopting and releasing the fix promptly.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

TLS 1.3 Protocol violation after HRR.

3 participants