提交 e7653f3b 编写于 作者: M Matt Caswell

Fix comment

Fix a comment following commit c2c49969.

RT2388
Reviewed-by: NRich Salz <rsalz@openssl.org>
上级 5ec84dd7
...@@ -2521,8 +2521,7 @@ static int ssl_scan_serverhello_tlsext(SSL *s, PACKET *pkt, int *al) ...@@ -2521,8 +2521,7 @@ static int ssl_scan_serverhello_tlsext(SSL *s, PACKET *pkt, int *al)
* an attack we should *always* see RI even on initial server hello * an attack we should *always* see RI even on initial server hello
* because the client doesn't see any renegotiation during an attack. * because the client doesn't see any renegotiation during an attack.
* However this would mean we could not connect to any server which * However this would mean we could not connect to any server which
* doesn't support RI so for the immediate future tolerate RI absence on * doesn't support RI so for the immediate future tolerate RI absence
* initial connect only.
*/ */
if (!renegotiate_seen && !(s->options & SSL_OP_LEGACY_SERVER_CONNECT) if (!renegotiate_seen && !(s->options & SSL_OP_LEGACY_SERVER_CONNECT)
&& !(s->options & SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION)) { && !(s->options & SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION)) {
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册