diff options
| author | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2001-05-07 19:16:04 +0000 |
|---|---|---|
| committer | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2001-05-07 19:16:04 +0000 |
| commit | 6448e99d4ba02c49a9cf28d4f96a7ca57527fa02 (patch) | |
| tree | ec44d7bc7a814aae7cdaed7958f996302cd9b531 | |
| parent | 0cc853fbe29baff7862a95d8bfcc9524eaa90df1 (diff) | |
| download | gnutls-6448e99d4ba02c49a9cf28d4f96a7ca57527fa02.tar.gz | |
better version handling
| -rw-r--r-- | lib/gnutls_v2_compat.c | 13 |
1 files changed, 10 insertions, 3 deletions
diff --git a/lib/gnutls_v2_compat.c b/lib/gnutls_v2_compat.c index bc4190ac7a..b5be2df950 100644 --- a/lib/gnutls_v2_compat.c +++ b/lib/gnutls_v2_compat.c @@ -98,7 +98,8 @@ static int SelectSuite_v2(GNUTLS_STATE state, opaque ret[2], char *data, #define DECR_LEN(len, x) len-=x; if (len<0) {gnutls_assert(); return GNUTLS_E_UNEXPECTED_PACKET_LENGTH;} -/* Read a v2 client hello +/* Read a v2 client hello. Some browsers still use that beast!!! + * However they set their version to 3.0 or 3.1 --- that's cool! */ int _gnutls_read_client_hello_v2(GNUTLS_STATE state, opaque * data, int datalen) @@ -126,8 +127,14 @@ int _gnutls_read_client_hello_v2(GNUTLS_STATE state, opaque * data, #endif version = _gnutls_version_get(data[pos], data[pos + 1]); - /* fallback to SSL 3.0 */ - gnutls_set_current_version(state, GNUTLS_SSL3); + + /* if we do not support that version */ + if (_gnutls_version_is_supported(state, version) == 0) { + gnutls_assert(); + return GNUTLS_E_UNSUPPORTED_VERSION_PACKET; + } else { + gnutls_set_current_version(state, version); + } pos += 2; |