Commit 7b0a3ce0 authored by Matt Caswell's avatar Matt Caswell
Browse files

Ensure CCS sent before early_data has the correct record version 



Reviewed-by: default avatarBen Kaduk <kaduk@mit.edu>
(Merged from https://github.com/openssl/openssl/pull/4701)
parent 426dfc9f

ssl/ssl_locl.h

+3 −1
Original line number Diff line number Diff line
@@ -323,7 +323,9 @@ 
                          && (s)->method->version != TLS_ANY_VERSION)



# define SSL_TREAT_AS_TLS13(s) \

    (SSL_IS_TLS13(s) || (s)->early_data_state == SSL_EARLY_DATA_WRITING \

    (SSL_IS_TLS13(s) || (s)->early_data_state == SSL_EARLY_DATA_CONNECTING \

     || (s)->early_data_state == SSL_EARLY_DATA_CONNECT_RETRY \

     || (s)->early_data_state == SSL_EARLY_DATA_WRITING \

     || (s)->early_data_state == SSL_EARLY_DATA_WRITE_RETRY)



# define SSL_IS_FIRST_HANDSHAKE(S) ((s)->s3->tmp.finish_md_len == 0 \