diff options
| author | Matt Caswell <matt@openssl.org> | 2017-10-16 11:19:03 +0100 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2017-10-16 15:52:19 +0100 |
| commit | beb30941d6b2d663144d74dc3846d5d49c127454 (patch) | |
| tree | 9bc54182dcb3ef664dc37a46b03d893677c641c9 | |
| parent | 61278ff3f952570a3ca06d02b07502069cd78f55 (diff) | |
| download | openssl-beb30941d6b2d663144d74dc3846d5d49c127454.tar.gz | |
Tweak the comment regarding record version check with respect to TLSv1.3
Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Ben Kaduk <kaduk@mit.edu>
(Merged from https://github.com/openssl/openssl/pull/4527)
| -rw-r--r-- | ssl/record/ssl3_record.c | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/ssl/record/ssl3_record.c b/ssl/record/ssl3_record.c index e17b2f001a..518e7a8c3b 100644 --- a/ssl/record/ssl3_record.c +++ b/ssl/record/ssl3_record.c @@ -272,9 +272,10 @@ int ssl3_get_record(SSL *s) thisrr->rec_version = version; /* - * Lets check version. In TLSv1.3 we ignore this field. For an - * HRR we haven't actually selected TLSv1.3 yet, but we still - * treat it as TLSv1.3, so we must check for that explicitly + * Lets check version. In TLSv1.3 we ignore this field. For the + * ServerHello after an HRR we haven't actually selected TLSv1.3 + * yet, but we still treat it as TLSv1.3, so we must check for + * that explicitly */ if (!s->first_packet && !SSL_IS_TLS13(s) && !s->hello_retry_request |