diff options
| author | Matt Caswell <matt@openssl.org> | 2022-11-08 16:20:08 +0000 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2023-01-24 17:16:29 +0000 |
| commit | a7f41885b368c7fb63e52aadaa0a5b5bd239b876 (patch) | |
| tree | 864a42c8091a387cf991b9c8d803d23064ff0b46 /ssl/statem | |
| parent | 342e3652c791bdb06e08abcc169b4456c83ccd00 (diff) | |
| download | openssl-new-a7f41885b368c7fb63e52aadaa0a5b5bd239b876.tar.gz | |
Create the SSL object for QUIC-TLS
The "user" SSL object which represents the QUIC connection should have an
"inner" SSL object to represent the TLS connection.
Reviewed-by: Hugo Landau <hlandau@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/19748)
Diffstat (limited to 'ssl/statem')
| -rw-r--r-- | ssl/statem/statem_lib.c | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/ssl/statem/statem_lib.c b/ssl/statem/statem_lib.c index 10e6ef9edd..40ca9a15e9 100644 --- a/ssl/statem/statem_lib.c +++ b/ssl/statem/statem_lib.c @@ -1657,23 +1657,23 @@ int ssl_check_version_downgrade(SSL_CONNECTION *s) { const version_info *vent; const version_info *table; - SSL_CTX *sctx = SSL_CONNECTION_GET_CTX(s); + SSL *ssl = SSL_CONNECTION_GET_SSL(s); /* * Check that the current protocol is the highest enabled version - * (according to s->ctx->method, as version negotiation may have changed + * (according to ssl->defltmethod, as version negotiation may have changed * s->method). */ - if (s->version == sctx->method->version) + if (s->version == ssl->defltmeth->version) return 1; /* * Apparently we're using a version-flexible SSL_METHOD (not at its * highest protocol version). */ - if (sctx->method->version == TLS_method()->version) + if (ssl->defltmeth->version == TLS_method()->version) table = tls_version_table; - else if (sctx->method->version == DTLS_method()->version) + else if (ssl->defltmeth->version == DTLS_method()->version) table = dtls_version_table; else { /* Unexpected state; fail closed. */ |