Since DTLS 1.0 is based on TLS 1.1 we should never return a decryption_failed

alert.
2011-01-04 19:33:30 +00:00
parent 964e91052e
commit a8515e2d28
2 changed files with 3 additions and 6 deletions
--- a/ssl/d1_pkt.c
+++ b/ssl/d1_pkt.c
@@ -414,7 +414,8 @@ dtls1_process_record(SSL *s)
 			goto err;

 		/* otherwise enc_err == -1 */
-		goto err;
+		al=SSL_AD_BAD_RECORD_MAC;
+		goto f_err;
 		}

 #ifdef TLS_DEBUG