Commit a4757716 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Since DTLS 1.0 is based on TLS 1.1 we should never return a decryption_failed 

alert.
parent 09d84e03

ssl/d1_enc.c

+1 −5
Original line number Diff line number Diff line
@@ -231,11 +231,7 @@ int dtls1_enc(SSL *s, int send) 
		if (!send)

			{

			if (l == 0 || l%bs != 0)

				{

				SSLerr(SSL_F_DTLS1_ENC,SSL_R_BLOCK_CIPHER_PAD_IS_WRONG);

				ssl3_send_alert(s,SSL3_AL_FATAL,SSL_AD_DECRYPTION_FAILED);

				return 0;

				}

				return -1;

			}

		

		EVP_Cipher(ds,rec->data,rec->input,l);

ssl/d1_pkt.c

+2 −1
Original line number Diff line number Diff line
@@ -414,7 +414,8 @@ dtls1_process_record(SSL *s) 
			goto err;



		/* otherwise enc_err == -1 */

		goto err;

		al=SSL_AD_BAD_RECORD_MAC;

		goto f_err;

		}



#ifdef TLS_DEBUG