generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Servers can't end up talking SSLv2 with legacy renegotiation disabled

Browse Source
This commit is contained in:
Dr. Stephen Henson 2009-11-18 15:09:44 +00:00
parent 4d09323a63
commit 6cef3a7f9c
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
ssl/s23_srvr.c
View File

@ -488,6 +488,11 @@ int ssl23_get_client_hello(SSL *s)
SSLerr(SSL_F_SSL23_GET_CLIENT_HELLO,SSL_R_UNSUPPORTED_PROTOCOL); SSLerr(SSL_F_SSL23_GET_CLIENT_HELLO,SSL_R_UNSUPPORTED_PROTOCOL);
goto err; goto err;
#else #else
if (!(s->ctx->options & SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION))
{
SSLerr(SSL_F_SSL23_GET_CLIENT_HELLO,SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED);
goto err;
}
/* we are talking sslv2 */ /* we are talking sslv2 */
/* we need to clean up the SSLv3/TLSv1 setup and put in the /* we need to clean up the SSLv3/TLSv1 setup and put in the
* sslv2 stuff. */ * sslv2 stuff. */