Commit 8cb30232 authored by Bodo Moeller's avatar Bodo Moeller
Browse files

When processing ClientHello.cipher_suites, don't ignore cipher suites 


listed after TLS_FALLBACK_SCSV.

RT: 3575
Reviewed-by: default avatarEmilia Kasper <emilia@openssl.org>
parent 392fa7a9

ssl/ssl_lib.c

+1 −0
Original line number Original line Diff line number Diff line
@@ -1618,6 +1618,7 @@ STACK_OF(SSL_CIPHER) *ssl_bytes_to_cipher_list(SSL *s,unsigned char *p,int num, 
					ssl3_send_alert(s,SSL3_AL_FATAL,SSL_AD_INAPPROPRIATE_FALLBACK);

					ssl3_send_alert(s,SSL3_AL_FATAL,SSL_AD_INAPPROPRIATE_FALLBACK);

				goto err;

				goto err;

				}

				}

			p += n;

			continue;

			continue;

			}

			}