Commit beb30941 authored by Matt Caswell's avatar Matt Caswell
Browse files

Tweak the comment regarding record version check with respect to TLSv1.3 



Reviewed-by: default avatarTim Hudson <tjh@openssl.org>
Reviewed-by: default avatarBen Kaduk <kaduk@mit.edu>
(Merged from https://github.com/openssl/openssl/pull/4527)
parent 61278ff3

ssl/record/ssl3_record.c

+4 −3
Original line number Diff line number Diff line
@@ -272,9 +272,10 @@ int ssl3_get_record(SSL *s) 
                thisrr->rec_version = version;



                /*

                 * Lets check version. In TLSv1.3 we ignore this field. For an

                 * HRR we haven't actually selected TLSv1.3 yet, but we still

                 * treat it as TLSv1.3, so we must check for that explicitly

                 * Lets check version. In TLSv1.3 we ignore this field. For the

                 * ServerHello after an HRR we haven't actually selected TLSv1.3

                 * yet, but we still treat it as TLSv1.3, so we must check for

                 * that explicitly

                 */

                if (!s->first_packet && !SSL_IS_TLS13(s)

                        && !s->hello_retry_request