Commit 3798a4d0 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Simplify RI+SCSV logic: 

1. Send SCSV is not renegotiating, never empty RI.
2. Send RI if renegotiating.
parent 5b8246d6

ssl/ssl_lib.c

+2 −3
Original line number Diff line number Diff line
@@ -1300,10 +1300,9 @@ int ssl_cipher_list_to_bytes(SSL *s,STACK_OF(SSL_CIPHER) *sk,unsigned char *p, 
		p+=j;

		}

	/* If p == q, no ciphers and caller indicates an error. Otherwise

	 * add SCSV if no extensions (i.e. SSL3 is client_version)

	 * since spec RECOMMENDS not sending both RI and SCSV.

	 * add SCSV if not renegotiating.

	 */

	if (p != q)

	if (p != q && !s->new_session)

		{

		static SSL_CIPHER scsv =

			{

ssl/t1_lib.c

+4 −3
Original line number Diff line number Diff line
@@ -175,7 +175,8 @@ unsigned char *ssl_add_clienthello_tlsext(SSL *s, unsigned char *p, unsigned cha 


		}

 

        /* Add the renegotiation option: TODOEKR switch */

        /* Add RI if renegotiating */

        if (s->new_session)

          {

          int el;