Commit 18f8258a authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

PR: 1629 

Submitted by: Kaspar Brand <ossl-rt@velox.ch>
Approved by: steve@openssl.org

Don't use extensions if using SSLv3: this chokes some broken servers.
parent 376bbb58

ssl/t1_lib.c

+8 −0
Changes for ssl/t1_lib.c: 8 added lines, 0 removed lines.
Original line number Diff line number Diff line
@@ -275,6 +275,10 @@ unsigned char *ssl_add_clienthello_tlsext(SSL *s, unsigned char *p, unsigned cha 
	int extdatalen=0;

	unsigned char *ret = p;



	/* don't add extensions for SSLv3 */

	if (s->client_version == SSL3_VERSION)

		return p;



	ret+=2;



	if (ret>=limit) return NULL; /* this really never occurs, but ... */
@@ -472,6 +476,10 @@ unsigned char *ssl_add_serverhello_tlsext(SSL *s, unsigned char *p, unsigned cha 
	int extdatalen=0;

	unsigned char *ret = p;



	/* don't add extensions for SSLv3 */

	if (s->version == SSL3_VERSION)

		return p;

	

	ret+=2;

	if (ret>=limit) return NULL; /* this really never occurs, but ... */