Don't add empty `certificate_authorities` extension

2024-01-05 09:04:38 +00:00 · 2024-01-05 09:04:38 +00:00 · 9f79bac621
parent f1cfaec555
commit 9f79bac621
1 changed files with 5 additions and 7 deletions
--- a/rustls/src/server/tls13.rs
+++ b/rustls/src/server/tls13.rs
@ -712,13 +712,11 @@ mod client_hello {
        cr.extensions
            .push(CertReqExtension::SignatureAlgorithms(schemes.to_vec()));

-        cr.extensions
-            .push(CertReqExtension::AuthorityNames(
-                config
-                    .verifier
-                    .root_hint_subjects()
-                    .to_vec(),
-            ));
+        let authorities = config.verifier.root_hint_subjects();
+        if !authorities.is_empty() {
+            cr.extensions
+                .push(CertReqExtension::AuthorityNames(authorities.to_vec()));
+        }

        let m = Message {
            version: ProtocolVersion::TLSv1_3,