commit 829f4d868b2b45ceafd80b01340be56defc77060
author Kazuho Oku <kazuhooku@gmail.com> Sat Feb 25 10:02:01 2023 +0900
committer Kazuho Oku <kazuhooku@gmail.com> Sat Feb 25 10:02:01 2023 +0900
tree b5661e36eff6f0bf58c61f8efa6e0c3141f4f1e0
parent 328a7b550ee1cfcd81495f81b3b37e85f7ee2e55

but they might have extensions

lib/picotls.c

diff --git a/lib/picotls.c b/lib/picotls.c
index dcde89c..f7e2219 100644
--- a/lib/picotls.c
+++ b/lib/picotls.c
@@ -3561,8 +3561,9 @@
         src = end;
     });
 
-    /* CH defined in TLS versions below 1.2 do not have extensions; so bail out after parsing the main variables */
-    if (ch->legacy_version < 0x0303) {
+    /* CH defined in TLS versions below 1.2 might not have extensions; so bail out after parsing the main variables. They might
+     * have extensions, in which case we'd recognize them as OpenSSL does. */
+    if (ch->legacy_version < 0x0303 && src == end) {
         ret = PTLS_ALERT_PROTOCOL_VERSION;
         goto Exit;
     }