send protocol_version fatal alert message

This commit is contained in:
Tesfa Mael
2019-05-21 16:08:25 -07:00
parent bf9f912b29
commit 295dd4ff21

View File

@ -7257,9 +7257,9 @@ static int GetRecordHeader(WOLFSSL* ssl, const byte* input, word32* inOutIdx,
WOLFSSL_MSG("DTLS handshake, skip RH version number check"); WOLFSSL_MSG("DTLS handshake, skip RH version number check");
else { else {
WOLFSSL_MSG("SSL version error"); WOLFSSL_MSG("SSL version error");
/* send alert per RFC 5246 Section 7.2.1 */ /* send alert per RFC5246 Appendix E. Backward Compatibility */
if(ssl->options.side == WOLFSSL_CLIENT_END) { if (ssl->options.side == WOLFSSL_CLIENT_END) {
SendAlert(ssl, alert_fatal, handshake_failure); SendAlert(ssl, alert_fatal, protocol_version);
} }
return VERSION_ERROR; /* only use requested version */ return VERSION_ERROR; /* only use requested version */
} }