From 84ce339ebbb0cd0a0ed6acf4a84ffa773c8a373a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cl=C3=A9ment=20Notin?= <clement.notin@gmail.com>
Date: Sun, 9 Aug 2026 22:07:33 +0200
Subject: [PATCH] Recognize TLS server key exchange messages

---
 nselib/tls.lua | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/nselib/tls.lua b/nselib/tls.lua
index 7838f57cb..fdd3c03d7 100644
--- a/nselib/tls.lua
+++ b/nselib/tls.lua
@@ -1560,6 +1560,14 @@ handshake_parse = {
         return b, j
       end,
 
+      -- The contents depend on the selected key exchange algorithm. Keep the
+      -- message available without attempting to interpret an algorithm-specific
+      -- structure.
+      server_key_exchange = function (buffer, j, msg_end)
+        local b = {}
+        b.data, j = unpack("c" .. msg_end - j, buffer, j)
+        return b, j
+      end,
       NewSessionTicket = function (buffer, j, msg_end, protocol)
         -- Need 4 bytes for parsing.
         local have = #buffer - j + 1