diff options
author | Dr. Stephen Henson <steve@openssl.org> | 2009-12-17 15:42:25 +0000 |
---|---|---|
committer | Dr. Stephen Henson <steve@openssl.org> | 2009-12-17 15:42:25 +0000 |
commit | 98809a14586612a42f66324bde86c3c2e74f27e4 (patch) | |
tree | f6ea2afafd446e2f61fbfc3c140f8ea57aa3f46a /ssl | |
parent | ccc3df8c33a3d48f56b8d3270bfbd4ae0a24736c (diff) |
Alert to use is now defined in spec: update code
Diffstat (limited to 'ssl')
-rw-r--r-- | ssl/t1_lib.c | 6 |
1 files changed, 2 insertions, 4 deletions
diff --git a/ssl/t1_lib.c b/ssl/t1_lib.c index 07a3900c7f..8625b57104 100644 --- a/ssl/t1_lib.c +++ b/ssl/t1_lib.c @@ -589,8 +589,7 @@ int ssl_parse_clienthello_tlsext(SSL *s, unsigned char **p, unsigned char *d, in if (!renegotiate_seen && s->new_session && !(s->options & SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION)) { - /* FIXME: Spec currently doesn't give alert to use */ - *al = SSL_AD_ILLEGAL_PARAMETER; + *al = SSL_AD_HANDSHAKE_FAILURE; SSLerr(SSL_F_SSL_PARSE_CLIENTHELLO_TLSEXT, SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED); return 0; @@ -709,8 +708,7 @@ int ssl_parse_serverhello_tlsext(SSL *s, unsigned char **p, unsigned char *d, in (s->new_session || !(s->options & SSL_OP_LEGACY_SERVER_CONNECT)) && !(s->options & SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION)) { - /* FIXME: Spec currently doesn't give alert to use */ - *al = SSL_AD_ILLEGAL_PARAMETER; + *al = SSL_AD_HANDSHAKE_FAILURE; SSLerr(SSL_F_SSL_PARSE_SERVERHELLO_TLSEXT, SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED); return 0; |