summaryrefslogtreecommitdiff
path: root/lib/libssl
diff options
context:
space:
mode:
authorJoel Sing <jsing@cvs.openbsd.org>2020-01-25 12:31:43 +0000
committerJoel Sing <jsing@cvs.openbsd.org>2020-01-25 12:31:43 +0000
commita3f1e8b18009ab6254759e25782b2db39d6166ce (patch)
tree68f4f2197cd52dfbf67642764c0cc00c253c54c9 /lib/libssl
parent5ed922978593da7da88a3fa9deebbb0aa731851e (diff)
Only send an RI extension for pre-TLSv1.3 versions.
ok beck@
Diffstat (limited to 'lib/libssl')
-rw-r--r--lib/libssl/ssl_tlsext.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/lib/libssl/ssl_tlsext.c b/lib/libssl/ssl_tlsext.c
index e66bd08f844..b76a48b99aa 100644
--- a/lib/libssl/ssl_tlsext.c
+++ b/lib/libssl/ssl_tlsext.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl_tlsext.c,v 1.54 2020/01/22 10:38:11 tb Exp $ */
+/* $OpenBSD: ssl_tlsext.c,v 1.55 2020/01/25 12:31:42 jsing Exp $ */
/*
* Copyright (c) 2016, 2017, 2019 Joel Sing <jsing@openbsd.org>
* Copyright (c) 2017 Doug Hogan <doug@openbsd.org>
@@ -443,7 +443,7 @@ tlsext_ri_server_parse(SSL *s, CBS *cbs, int *alert)
int
tlsext_ri_server_needs(SSL *s)
{
- return (S3I(s)->send_connection_binding);
+ return (s->version < TLS1_3_VERSION && S3I(s)->send_connection_binding);
}
int