generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Various custom extension fixes.

Browse Source 
Force no SSL2 when custom extensions in use.
Don't clear extension state when cert is set.
Clear on renegotiate.
This commit is contained in:
Trevor Perrin
2013-07-27 23:10:14 -07:00
committed by Ben Laurie
parent a898936218
commit 0b2bde70dd
3 changed files with 13 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
ssl/s23_clnt.c
View File

@@ -340,7 +340,9 @@ static int ssl23_client_hello(SSL *s)
if (s->ctx->tlsext_opaque_prf_input_callback != 0 || s->tlsext_opaque_prf_input != NULL)
ssl2_compat = 0;
#endif
if (s->ctx->tlsext_authz_server_audit_proof_cb != NULL)
if (s->ctx->tlsext_authz_server_audit_proof_cb != NULL)
ssl2_compat = 0;
if (s->ctx->custom_cli_ext_records_count != 0)
ssl2_compat = 0;
}
#endif