diff options
| -rw-r--r-- | lib/gnutls_extensions.c | 12 |
1 files changed, 9 insertions, 3 deletions
diff --git a/lib/gnutls_extensions.c b/lib/gnutls_extensions.c index 76624a21d6..38c4f9163c 100644 --- a/lib/gnutls_extensions.c +++ b/lib/gnutls_extensions.c @@ -174,8 +174,6 @@ _gnutls_parse_extensions(gnutls_session_t session, gnutls_assert(); return ret; } - } else { - _gnutls_extension_list_add(session, type); } DECR_LENGTH_RET(next, 2, 0); @@ -195,6 +193,11 @@ _gnutls_parse_extensions(gnutls_session_t session, continue; } + /* only store the extension number if we support it */ + if (session->security_parameters.entity == GNUTLS_SERVER) { + _gnutls_extension_list_add(session, type); + } + _gnutls_handshake_log ("EXT[%p]: Parsing extension '%s/%d' (%d bytes)\n", session, _gnutls_extension_get_name(type), type, @@ -213,8 +216,11 @@ _gnutls_parse_extensions(gnutls_session_t session, } /* Adds the extension we want to send in the extensions list. - * This list is used to check whether the (later) received + * This list is used in client side to check whether the (later) received * extensions are the ones we requested. + * + * In server side, this list is used to ensure we don't send + * extensions that we didn't receive a corresponding value. */ void _gnutls_extension_list_add(gnutls_session_t session, uint16_t type) { |