Commit 226751ae authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Set TLS v1.2 disabled mask properly.

parent 1769dfab

ssl/s3_clnt.c

+5 −0
Original line number Diff line number Diff line
@@ -1073,6 +1073,11 @@ int ssl3_get_server_hello(SSL *s) 
		SSLerr(SSL_F_SSL3_GET_SERVER_HELLO,SSL_R_UNKNOWN_CIPHER_RETURNED);

		goto f_err;

		}

	/* Set version disabled mask now we know version */

	if (!SSL_USE_TLS1_2_CIPHERS(s))

		ct->mask_ssl = SSL_TLSV1_2;

	else

		ct->mask_ssl = 0;

	/* If it is a disabled cipher we didn't send it in client hello,

	 * so return an error.

	 */