mirror of
https://github.com/yuzu-emu/mbedtls
synced 2024-11-24 22:58:18 +00:00
Secure renegotiation extension should only be sent in case client supports secure renegotiation
(cherry picked from commit 7c3c3899cf
)
This commit is contained in:
parent
de65623f3e
commit
2013950545
1 changed files with 22 additions and 19 deletions
|
@ -983,6 +983,8 @@ static int ssl_write_server_hello( ssl_context *ssl )
|
|||
SSL_DEBUG_MSG( 3, ( "server hello, compress alg.: %d",
|
||||
ssl->session_negotiate->compression ) );
|
||||
|
||||
if( ssl->secure_renegotiation == SSL_SECURE_RENEGOTIATION )
|
||||
{
|
||||
SSL_DEBUG_MSG( 3, ( "server hello, prepping for secure renegotiation extension" ) );
|
||||
ext_len += 5 + ssl->verify_data_len * 2;
|
||||
|
||||
|
@ -1008,6 +1010,7 @@ static int ssl_write_server_hello( ssl_context *ssl )
|
|||
p += ssl->verify_data_len;
|
||||
memcpy( p, ssl->own_verify_data, ssl->verify_data_len );
|
||||
p += ssl->verify_data_len;
|
||||
}
|
||||
|
||||
ssl->out_msglen = p - buf;
|
||||
ssl->out_msgtype = SSL_MSG_HANDSHAKE;
|
||||
|
|
Loading…
Reference in a new issue