Commit 97997489 authored by Matt Caswell's avatar Matt Caswell
Browse files

ChangeCipherSpec is not allowed in TLSv1.3 



Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2259)
parent 26967dc3

ssl/record/rec_layer_s3.c

+2 −1
Original line number Diff line number Diff line
@@ -1223,7 +1223,8 @@ int ssl3_read_bytes(SSL *s, int type, int *recvd_type, unsigned char *buf, 


    if (type == SSL3_RECORD_get_type(rr)

        || (SSL3_RECORD_get_type(rr) == SSL3_RT_CHANGE_CIPHER_SPEC

            && type == SSL3_RT_HANDSHAKE && recvd_type != NULL)) {

            && type == SSL3_RT_HANDSHAKE && recvd_type != NULL

            && !SSL_IS_TLS13(s))) {

        /*

         * SSL3_RT_APPLICATION_DATA or

         * SSL3_RT_HANDSHAKE or