Send specific DTLS alert for the failure caused by incorrect PSKd (#675)

2026-09-04 16:20:05 +00:00 · 2016-09-23 09:22:49 -07:00
parent 465affadb9
commit 1d17a034c8
1 changed files with 9 additions and 0 deletions
@@ -354,6 +354,15 @@ void Dtls::Process(void)
            case MBEDTLS_ERR_SSL_FATAL_ALERT_MESSAGE:
                break;

+            case MBEDTLS_ERR_SSL_INVALID_MAC:
+                if (mSsl.state != MBEDTLS_SSL_HANDSHAKE_OVER)
+                {
+                    mbedtls_ssl_send_alert_message(&mSsl, MBEDTLS_SSL_ALERT_LEVEL_FATAL,
+                                                   MBEDTLS_SSL_ALERT_MSG_BAD_RECORD_MAC);
+                }
+
+                break;
+
            default:
                if (mSsl.state != MBEDTLS_SSL_HANDSHAKE_OVER)
                {