mvadkert / rpms / openssl

Forked from rpms/openssl 6 years ago
Clone
d8cd5c4
Skip adding tls extensions to client hello when protocol version is
d8cd5c4
not TLS.
d8cd5c4
diff -up openssl-0.9.8g/ssl/t1_lib.c.no-extssl openssl-0.9.8g/ssl/t1_lib.c
d8cd5c4
--- openssl-0.9.8g/ssl/t1_lib.c.no-extssl	2007-10-19 09:44:10.000000000 +0200
d8cd5c4
+++ openssl-0.9.8g/ssl/t1_lib.c	2007-12-13 17:22:10.000000000 +0100
d8cd5c4
@@ -132,6 +132,11 @@ unsigned char *ssl_add_clienthello_tlsex
d8cd5c4
 	int extdatalen=0;
d8cd5c4
 	unsigned char *ret = p;
d8cd5c4
 
d8cd5c4
+	if (s->client_version != TLS1_VERSION && s->client_version != DTLS1_VERSION)
d8cd5c4
+	{
d8cd5c4
+		return ret;
d8cd5c4
+	}
d8cd5c4
+
d8cd5c4
 	ret+=2;
d8cd5c4
 
d8cd5c4
 	if (ret>=limit) return NULL; /* this really never occurs, but ... */