8210334: TLS 1.3 server fails if ClientHello doesn't have pre_shared_key and psk_key_exchange_modes

XueleiFan · XueleiFan · commit b7fdc4943f12 · 2018-09-05T21:01:39.000-07:00
Reviewed-by: ascarpino, wetmore
diff --git a/src/java.base/share/classes/sun/security/ssl/PskKeyExchangeModesExtension.java b/src/java.base/share/classes/sun/security/ssl/PskKeyExchangeModesExtension.java
@@ -323,7 +323,7 @@ public void absent(ConnectionContext context,
             // servers MUST abort the handshake.
             SSLExtensionSpec spec =
                 shc.handshakeExtensions.get(SSLExtension.CH_PRE_SHARED_KEY);
-            if (spec == null) {
+            if (spec != null) {
                 shc.conContext.fatal(Alert.HANDSHAKE_FAILURE,
                         "pre_shared_key key extension is offered " +
                         "without a psk_key_exchange_modes extension");
