From 7001599782600dc7579901ffe0da7e34e47f1f81 Mon Sep 17 00:00:00 2001 From: Sean Parkinson Date: Wed, 8 Apr 2020 11:36:47 +1000 Subject: [PATCH] Another place where TLS 1.3 capable check is required --- src/internal.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/internal.c b/src/internal.c index 86083fcaf..f099563fe 100644 --- a/src/internal.c +++ b/src/internal.c @@ -24252,7 +24252,7 @@ static int DoSessionTicket(WOLFSSL* ssl, const byte* input, word32* inOutIdx, return ret; #ifdef WOLFSSL_TLS13 - if (IsAtLeastTLSv1_3(ssl->ctx->method->version)) { + if (TLSv1_3_Capable(ssl)) { /* TLS v1.3 capable server downgraded. */ XMEMCPY(output + idx + RAN_LEN - (TLS13_DOWNGRADE_SZ + 1), tls13Downgrade, TLS13_DOWNGRADE_SZ);