Simplify RI+SCSV logic:

1. Send SCSV is not renegotiating, never empty RI. 2. Send RI if renegotiating.
2010-01-07 19:09:32 +00:00
parent 5b8246d6eb
commit 3798a4d059
2 changed files with 6 additions and 6 deletions
--- a/ssl/t1_lib.c
+++ b/ssl/t1_lib.c
@@ -174,9 +174,10 @@ unsigned char *ssl_add_clienthello_tlsext(SSL *s, unsigned char *p, unsigned cha
 		ret+=size_str;

 		}
-        
-        /* Add the renegotiation option: TODOEKR switch */
-        {
+ 
+        /* Add RI if renegotiating */
+        if (s->new_session)
+          {
          int el;
          
          if(!ssl_add_clienthello_renegotiate_ext(s, 0, &el, 0))