Verify that the server did not send any extension that the client didn't

offer. Previously the client only checked a couple of special cases.

1 files changed, 8 insertions, 0 deletions

diff --git a/src/lib/tls/tls_extensions.cpp b/src/lib/tls/tls_extensions.cpp
index 1ae9f1749..0860006e6 100644
--- a/src/lib/tls/tls_extensions.cpp
+++ b/src/lib/tls/tls_extensions.cpp
@@ -115,6 +115,14 @@ std::vector<byte> Extensions::serialize() const
    return buf;
    }
 
+std::set<Handshake_Extension_Type> Extensions::extension_types() const
+   {
+   std::set<Handshake_Extension_Type> offers;
+   for(auto i = extensions.begin(); i != extensions.end(); ++i)
+      offers.insert(i->first);
+   return offers;
+   }
+
 Server_Name_Indicator::Server_Name_Indicator(TLS_Data_Reader& reader,
                                              u16bit extension_size)
    {