In wolfSSL before 5.2.0, certificate validation may be bypassed during attempted authentication by a TLS 1.3 client to a TLS 1.3 server. This occurs when the sig_algo field differs between the certificate_verify message and the certificate message.

In wolfSSL before 5.2.0, a TLS 1.3 server cannot properly enforce a requirement for mutual authentication. A client can simply omit the certificate_verify message from the handshake, and never present a certificate.

tcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv6() at tree.c

tcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv4() at tree.c.