forked from wolfSSL/wolfssl
Only drop plaintext msgs when we don't have stuff to rtx
This commit is contained in:
@ -20011,9 +20011,10 @@ static int HandleDTLSDecryptFailed(WOLFSSL* ssl)
|
|||||||
|
|
||||||
static int DtlsShouldDrop(WOLFSSL* ssl, int retcode)
|
static int DtlsShouldDrop(WOLFSSL* ssl, int retcode)
|
||||||
{
|
{
|
||||||
if (ssl->options.handShakeDone && !IsEncryptionOn(ssl, 0)) {
|
if (ssl->options.handShakeDone && !IsEncryptionOn(ssl, 0) &&
|
||||||
|
!ssl->options.dtlsHsRetain) {
|
||||||
WOLFSSL_MSG("Silently dropping plaintext DTLS message "
|
WOLFSSL_MSG("Silently dropping plaintext DTLS message "
|
||||||
"on established connection.");
|
"on established connection when we have nothing to send.");
|
||||||
return 1;
|
return 1;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user