generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

PR: 1629

Browse Source 
Submitted by: Kaspar Brand <ossl-rt@velox.ch>
Approved by: steve@openssl.org

Don't use extensions if using SSLv3: this chokes some broken servers.
This commit is contained in:
Dr. Stephen Henson 2009-04-28 22:01:53 +00:00
parent 376bbb5887
commit 18f8258a87
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
ssl/t1_lib.c
View File

@ -275,6 +275,10 @@ unsigned char *ssl_add_clienthello_tlsext(SSL *s, unsigned char *p, unsigned cha
int extdatalen=0; int extdatalen=0;
unsigned char *ret = p; unsigned char *ret = p;
/* don't add extensions for SSLv3 */
if (s->client_version == SSL3_VERSION)
return p;
ret+=2; ret+=2;
if (ret>=limit) return NULL; /* this really never occurs, but ... */ if (ret>=limit) return NULL; /* this really never occurs, but ... */
@ -472,6 +476,10 @@ unsigned char *ssl_add_serverhello_tlsext(SSL *s, unsigned char *p, unsigned cha
int extdatalen=0; int extdatalen=0;
unsigned char *ret = p; unsigned char *ret = p;
/* don't add extensions for SSLv3 */
if (s->version == SSL3_VERSION)
return p;
ret+=2; ret+=2;
if (ret>=limit) return NULL; /* this really never occurs, but ... */ if (ret>=limit) return NULL; /* this really never occurs, but ... */