offer only TLS 1.3 cipher suites for TLS 1.3 ClientHellos

quic-go · Mar 30, 2023 · a42b12e · a42b12e
1 parent 8fcfb95
commit a42b12e
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/handshake_client.go b/handshake_client.go
@@ -144,6 +144,9 @@ func (c *Conn) makeClientHello() (*clientHelloMsg, *ecdh.PrivateKey, error) {
 
 	var key *ecdh.PrivateKey
 	if hello.supportedVersions[0] == VersionTLS13 {
+		if len(hello.supportedVersions) == 1 {
+			hello.cipherSuites = hello.cipherSuites[:0]
+		}
 		if hasAESGCMHardwareSupport {
 			hello.cipherSuites = append(hello.cipherSuites, defaultCipherSuitesTLS13...)
 		} else {