提交 beb30941 编写于 作者: M Matt Caswell

Tweak the comment regarding record version check with respect to TLSv1.3

Reviewed-by: NTim Hudson <tjh@openssl.org>
Reviewed-by: NBen Kaduk <kaduk@mit.edu>
(Merged from https://github.com/openssl/openssl/pull/4527)
上级 61278ff3
...@@ -272,9 +272,10 @@ int ssl3_get_record(SSL *s) ...@@ -272,9 +272,10 @@ int ssl3_get_record(SSL *s)
thisrr->rec_version = version; thisrr->rec_version = version;
/* /*
* Lets check version. In TLSv1.3 we ignore this field. For an * Lets check version. In TLSv1.3 we ignore this field. For the
* HRR we haven't actually selected TLSv1.3 yet, but we still * ServerHello after an HRR we haven't actually selected TLSv1.3
* treat it as TLSv1.3, so we must check for that explicitly * yet, but we still treat it as TLSv1.3, so we must check for
* that explicitly
*/ */
if (!s->first_packet && !SSL_IS_TLS13(s) if (!s->first_packet && !SSL_IS_TLS13(s)
&& !s->hello_retry_request && !s->hello_retry_request
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册