Ensure CCS sent before early_data has the correct record version
Reviewed-by: Ben Kaduk <kaduk@mit.edu> (Merged from https://github.com/openssl/openssl/pull/4701)
This commit is contained in:
parent
426dfc9ff7
commit
7b0a3ce0f9
1 changed files with 3 additions and 1 deletions
|
@ -323,7 +323,9 @@
|
|||
&& (s)->method->version != TLS_ANY_VERSION)
|
||||
|
||||
# define SSL_TREAT_AS_TLS13(s) \
|
||||
(SSL_IS_TLS13(s) || (s)->early_data_state == SSL_EARLY_DATA_WRITING \
|
||||
(SSL_IS_TLS13(s) || (s)->early_data_state == SSL_EARLY_DATA_CONNECTING \
|
||||
|| (s)->early_data_state == SSL_EARLY_DATA_CONNECT_RETRY \
|
||||
|| (s)->early_data_state == SSL_EARLY_DATA_WRITING \
|
||||
|| (s)->early_data_state == SSL_EARLY_DATA_WRITE_RETRY)
|
||||
|
||||
# define SSL_IS_FIRST_HANDSHAKE(S) ((s)->s3->tmp.finish_md_len == 0 \
|
||||
|
|
Loading…
Reference in a new issue