Commit 5d965f07 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Don't use SSLv2 compatible client hello if we don't tolerate legacy renegotiation

parent b14713c2

ssl/s23_clnt.c

+2 −0
Original line number Diff line number Diff line
@@ -235,6 +235,8 @@ static int ssl23_client_hello(SSL *s) 
			ssl2_compat = 0;

		if (s->tlsext_status_type != -1)

			ssl2_compat = 0;

		if (!(s->ctx->options & SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION))

			ssl2_compat = 0;

		}

#endif