Commit fb8d9ddb authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Make tls_session_secret_cb work with CVE-2014-0224 fix. 

If application uses tls_session_secret_cb for session resumption
set the CCS_OK flag.
parent c43a5540

ssl/s3_clnt.c

+1 −0
Original line number Diff line number Diff line
@@ -1037,6 +1037,7 @@ int ssl3_get_server_hello(SSL *s) 
			{

			s->session->cipher = pref_cipher ?

				pref_cipher : ssl_get_cipher_by_char(s, p+j);

	    		s->s3->flags |= SSL3_FLAGS_CCS_OK;

			}

		}

#endif /* OPENSSL_NO_TLSEXT */