Submitted by: steve@openssl.org

Fix DTLS connection so new_session is reset if we read second client hello:
new_session is used to detect renegotiation.
This commit is contained in:
Dr. Stephen Henson 2010-01-16 19:46:10 +00:00
parent 598b562a7f
commit 8d39d2800a

View file

@ -292,6 +292,7 @@ int dtls1_accept(SSL *s)
ret = dtls1_send_hello_verify_request(s);
if ( ret <= 0) goto end;
s->state=SSL3_ST_SW_FLUSH;
s->new_session = 0;
s->s3->tmp.next_state=SSL3_ST_SR_CLNT_HELLO_A;
/* HelloVerifyRequest resets Finished MAC */