generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Servers can't end up talking SSLv2 with legacy renegotiation disabled

Browse Source
This commit is contained in:
Dr. Stephen Henson
2009-11-18 15:08:49 +00:00
parent 5d965f0783
commit 7f5448e3a8
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
ssl/s23_srvr.c
View File

@@ -486,6 +486,11 @@ int ssl23_get_client_hello(SSL *s)
SSLerr(SSL_F_SSL23_GET_CLIENT_HELLO,SSL_R_UNSUPPORTED_PROTOCOL);
goto err;
#else
if (!(s->ctx->options & SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION))
{
SSLerr(SSL_F_SSL23_GET_CLIENT_HELLO,SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED);
goto err;
}
/* we are talking sslv2 */
/* we need to clean up the SSLv3/TLSv1 setup and put in the
* sslv2 stuff. */