Secure renegotiation extension should only be sent in case client supports secure renegotiation

(cherry picked from commit 7c3c3899cf)
This commit is contained in:
Paul Bakker 2013-06-24 12:05:39 +02:00
parent de65623f3e
commit 2013950545

View file

@ -983,6 +983,8 @@ static int ssl_write_server_hello( ssl_context *ssl )
SSL_DEBUG_MSG( 3, ( "server hello, compress alg.: %d",
ssl->session_negotiate->compression ) );
if( ssl->secure_renegotiation == SSL_SECURE_RENEGOTIATION )
{
SSL_DEBUG_MSG( 3, ( "server hello, prepping for secure renegotiation extension" ) );
ext_len += 5 + ssl->verify_data_len * 2;
@ -1008,6 +1010,7 @@ static int ssl_write_server_hello( ssl_context *ssl )
p += ssl->verify_data_len;
memcpy( p, ssl->own_verify_data, ssl->verify_data_len );
p += ssl->verify_data_len;
}
ssl->out_msglen = p - buf;
ssl->out_msgtype = SSL_MSG_HANDSHAKE;