Commit 08931f1c authored by Bodo Moeller's avatar Bodo Moeller
Browse files

When processing ClientHello.cipher_suites, don't ignore cipher suites 


listed after TLS_FALLBACK_SCSV.

RT: 3575
Reviewed-by: default avatarEmilia Kasper <emilia@openssl.org>
parent 6ce9687b

ssl/ssl_lib.c

+1 −0
Original line number Diff line number Diff line
@@ -1507,6 +1507,7 @@ STACK_OF(SSL_CIPHER) *ssl_bytes_to_cipher_list(SSL *s,unsigned char *p,int num, 
					ssl3_send_alert(s,SSL3_AL_FATAL,SSL_AD_INAPPROPRIATE_FALLBACK);

				goto err;

				}

			p += n;

			continue;

			}