tree 1328337c9a760e2ad09bf03fc9f4c8866e1662ef
parent da15f2910d339d81e3125fa85b6d91783a52621d
author David Benjamin <davidben@google.com> 1622646733 -0400
committer Adam Langley <agl@google.com> 1622753909 +0000

Reject the ECH extension in TLS 1.2 ServerHello.

The ECH server extension is defined for TLS 1.3 EncryptedExtensions, not
TLS 1.2 ServerHello.

Bug: 275
Change-Id: Ie6e76c238075d70e6a0694ec0192df07da3457d1
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/47910
Reviewed-by: Adam Langley <agl@google.com>