summaryrefslogtreecommitdiffstats
path: root/lib/libssl/ssl_versions.c
diff options
context:
space:
mode:
authorjsing <jsing@openbsd.org>2021-02-20 08:30:52 +0000
committerjsing <jsing@openbsd.org>2021-02-20 08:30:52 +0000
commite9d01b14de6233c551b61ccdf5567bc15ea90a64 (patch)
tree2881921bf9105e34130ce9a3896ec2ef49117f58 /lib/libssl/ssl_versions.c
parentRevise HelloVerifyRequest handling for DTLSv1.2. (diff)
downloadwireguard-openbsd-e9d01b14de6233c551b61ccdf5567bc15ea90a64.tar.xz
wireguard-openbsd-e9d01b14de6233c551b61ccdf5567bc15ea90a64.zip
Handle DTLS1_2_VERSION in various places.
ok tb@
Diffstat (limited to 'lib/libssl/ssl_versions.c')
-rw-r--r--lib/libssl/ssl_versions.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/lib/libssl/ssl_versions.c b/lib/libssl/ssl_versions.c
index 83d0d06af50..2245ae15b5b 100644
--- a/lib/libssl/ssl_versions.c
+++ b/lib/libssl/ssl_versions.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl_versions.c,v 1.9 2021/02/07 15:04:10 jsing Exp $ */
+/* $OpenBSD: ssl_versions.c,v 1.10 2021/02/20 08:30:52 jsing Exp $ */
/*
* Copyright (c) 2016, 2017 Joel Sing <jsing@openbsd.org>
*
@@ -236,7 +236,7 @@ int
ssl_legacy_stack_version(SSL *s, uint16_t version)
{
if (SSL_is_dtls(s))
- return version == DTLS1_VERSION;
+ return version == DTLS1_VERSION || version == DTLS1_2_VERSION;
return version == TLS1_VERSION || version == TLS1_1_VERSION ||
version == TLS1_2_VERSION;