Fix downgrade when doing TLS v1.3

This commit is contained in:
Sean Parkinson
2018-03-08 15:05:36 +10:00
parent d35a3f1e69
commit d6ffa0dd8e

View File

@@ -2645,7 +2645,7 @@ int DoTls13ServerHello(WOLFSSL* ssl, const byte* input, word32* inOutIdx,
#else #else
if (pv.major == ssl->version.major && pv.minor < TLSv1_2_MINOR && if (pv.major == ssl->version.major && pv.minor < TLSv1_2_MINOR &&
ssl->options.downgrade) { ssl->options.downgrade) {
ssl->version = pv; ssl->version.minor = TLSv1_2_MINOR;
return DoServerHello(ssl, input, inOutIdx, helloSz); return DoServerHello(ssl, input, inOutIdx, helloSz);
} }
if (pv.major != ssl->version.major || pv.minor != TLSv1_2_MINOR) if (pv.major != ssl->version.major || pv.minor != TLSv1_2_MINOR)