Commit e7653f3b authored by Matt Caswell's avatar Matt Caswell
Browse files

Fix comment 



Fix a comment following commit c2c49969.

RT2388

Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
parent 5ec84dd7

ssl/t1_lib.c

+1 −2
Original line number Diff line number Diff line
@@ -2521,8 +2521,7 @@ static int ssl_scan_serverhello_tlsext(SSL *s, PACKET *pkt, int *al) 
     * an attack we should *always* see RI even on initial server hello

     * because the client doesn't see any renegotiation during an attack.

     * However this would mean we could not connect to any server which

     * doesn't support RI so for the immediate future tolerate RI absence on

     * initial connect only.

     * doesn't support RI so for the immediate future tolerate RI absence

     */

    if (!renegotiate_seen && !(s->options & SSL_OP_LEGACY_SERVER_CONNECT)

        && !(s->options & SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION)) {