RFC 8446, "The Transport Layer Security (TLS) Protocol Version 1.3", August 2018

Errata ID: 5682
Status: Held for Document Update
Type: Technical
Publication Format(s) : TEXT
Reported By: Richard Barnes
Date Reported: 2019-04-01
Held for Document Update by: Paul Wouters
Date Held: 2024-01-17

Section 4.3.2, B.3.2 says:

     struct {
         opaque certificate_request_context<0..2^8-1>;
         Extension extensions<2..2^16-1>;
     } CertificateRequest;

It should say:

     struct {
         opaque certificate_request_context<0..2^8-1>;
         Extension extensions<0..2^16-1>;
     } CertificateRequest;

Notes:

The length of this vector can never 2. It is either 0, if the vector is empty, or >=4, if the vector has at least one extension. Nothing elsewhere in the spec requires a non-zero number of extensions here, so this syntax should allow a zero-length vector.

Paul Wouters (AD): There are two places in the mentioned sections that need this one liner fix.

Report New Errata