Commit 4d09323a authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Don't use SSLv2 compatible client hello if we don't tolerate legacy renegotiation

parent 64abf5e6

ssl/s23_clnt.c

+2 −0
Original line number Diff line number Diff line
@@ -305,6 +305,8 @@ static int ssl23_client_hello(SSL *s) 
			ssl2_compat = 0;

		if (s->tlsext_status_type != -1)

			ssl2_compat = 0;

		if (!(s->ctx->options & SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION))

			ssl2_compat = 0;

		

#ifdef TLSEXT_TYPE_opaque_prf_input

		if (s->ctx->tlsext_opaque_prf_input_callback != 0 || s->tlsext_opaque_prf_input != NULL)