diff options
| author | Bodo Moeller <bodo@openssl.org> | 2014-10-15 04:03:28 +0200 |
|---|---|---|
| committer | Bodo Moeller <bodo@openssl.org> | 2014-10-15 04:03:28 +0200 |
| commit | cf6da05304d554aaa885151451aa4ecaa977e601 (patch) | |
| tree | be3b67fd78ae75a3cc8e6b79f934a5db63ea11e4 /ssl/s23_clnt.c | |
| parent | ffa08b3242e0f10f1fef3c93ef3f0b51de8c27a9 (diff) | |
Support TLS_FALLBACK_SCSV.
Reviewed-by: Stephen Henson <steve@openssl.org>
Diffstat (limited to 'ssl/s23_clnt.c')
| -rw-r--r-- | ssl/s23_clnt.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/ssl/s23_clnt.c b/ssl/s23_clnt.c index deb18637ef..fa58862ba1 100644 --- a/ssl/s23_clnt.c +++ b/ssl/s23_clnt.c @@ -752,6 +752,9 @@ static int ssl23_get_server_hello(SSL *s) goto err; } + /* ensure that TLS_MAX_VERSION is up-to-date */ + OPENSSL_assert(s->version <= TLS_MAX_VERSION); + if (!ssl_security(s, SSL_SECOP_VERSION, 0, s->version, NULL)) { SSLerr(SSL_F_SSL23_GET_SERVER_HELLO,SSL_R_VERSION_TOO_LOW); |