forked from wolfSSL/wolfssl
Only drop plaintext msgs when we don't have stuff to rtx
This commit is contained in:
@ -20011,9 +20011,10 @@ static int HandleDTLSDecryptFailed(WOLFSSL* ssl)
|
||||
|
||||
static int DtlsShouldDrop(WOLFSSL* ssl, int retcode)
|
||||
{
|
||||
if (ssl->options.handShakeDone && !IsEncryptionOn(ssl, 0)) {
|
||||
if (ssl->options.handShakeDone && !IsEncryptionOn(ssl, 0) &&
|
||||
!ssl->options.dtlsHsRetain) {
|
||||
WOLFSSL_MSG("Silently dropping plaintext DTLS message "
|
||||
"on established connection.");
|
||||
"on established connection when we have nothing to send.");
|
||||
return 1;
|
||||
}
|
||||
|
||||
|
Reference in New Issue
Block a user