From 2885df68b4f55961548d3a292128613c18e6774b Mon Sep 17 00:00:00 2001
From: Anthony Hu <anthony@wolfssl.com>
Date: Mon, 25 Aug 2025 12:01:29 -0400
Subject: [PATCH] Properly detect duplicate CKS extensions.

---
 src/tls.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/tls.c b/src/tls.c
index 84114f7e3..7ce76aacc 100644
--- a/src/tls.c
+++ b/src/tls.c
@@ -16129,6 +16129,9 @@ int TLSX_Parse(WOLFSSL* ssl, const byte* input, word16 length, byte msgType,
         if ((type <= 62) || (type == TLSX_RENEGOTIATION_INFO)
         #ifdef WOLFSSL_QUIC
             || (type == TLSX_KEY_QUIC_TP_PARAMS_DRAFT)
+        #endif
+        #ifdef WOLFSSL_DUAL_ALG_CERTS
+            || (type == TLSX_CKS)
         #endif
             )
         {