Commit fde111ba authored by Todd Short's avatar Todd Short Committed by Kurt Roeckx
Browse files

Fix inconsistent check of UNSAFE_LEGACY_RENEGOTIATION (1.0.2) 



The check for SSL3_FLAGS_ALLOW_UNSAFE_LEGACY_RENEGOTIATION is
inconsistent. Most places check SSL->options, one place is checking
SSL_CTX->options; fix that.

Reviewed-by: default avatarMatt Caswell <matt@openssl.org>
Reviewed-by: default avatarKurt Roeckx <kurt@roeckx.be>
GH: #3521
parent 8a996d2a

ssl/s3_pkt.c

+1 −1
Original line number Diff line number Diff line
@@ -1427,7 +1427,7 @@ int ssl3_read_bytes(SSL *s, int type, unsigned char *buf, int len, int peek) 
        (s->s3->handshake_fragment_len >= 4) &&

        (s->s3->handshake_fragment[0] == SSL3_MT_CLIENT_HELLO) &&

        (s->session != NULL) && (s->session->cipher != NULL) &&

        !(s->ctx->options & SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION)) {

        !(s->options & SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION)) {

        /*

         * s->s3->handshake_fragment_len = 0;

         */