corrected check which prevented client to sent an unacceptable for the version ciphersuite

1 files changed, 12 insertions, 11 deletions

diff --git a/lib/algorithms/ciphersuites.c b/lib/algorithms/ciphersuites.c
index 75608e9925..2463c3c1a1 100644
--- a/lib/algorithms/ciphersuites.c
+++ b/lib/algorithms/ciphersuites.c
@@ -1282,17 +1282,18 @@ _gnutls_supported_ciphersuites(gnutls_session_t session,
 				if (ce == NULL)
 					continue;
 
-				if (is_dtls == 0
-				    && !(version->id >= ce->min_version))
-					continue;
-				else if (is_dtls != 0
-					 && !(version->id >=
-					      ce->min_dtls_version))
-
-					if (k + 2 > max_cipher_suite_size)
-						return
-						    gnutls_assert_val
-						    (GNUTLS_E_INTERNAL_ERROR);
+				if (is_dtls) {
+					if (version->id < ce->min_dtls_version)
+						continue;
+				} else {
+					if (version->id < ce->min_version)
+						continue;
+				}
+
+				if (k + 2 > max_cipher_suite_size)
+					return
+					    gnutls_assert_val
+					    (GNUTLS_E_INTERNAL_ERROR);
 
 				memcpy(&cipher_suites[k], ce->id, 2);
 				k += 2;