Try handling the case when the first side knows the ecdsa key of

the second, but the second not the key of the first.
(And both have the experimental protocol enabled)

diff --git a/src/protocol_auth.c b/src/protocol_auth.c
index be90d92bfe5a619ddcb01a915bfc72101cf0d55f..5782a97c7d48f3e2ae864a103b177799c8c3f761 100644 (file)
--- a/src/protocol_auth.c
+++ b/src/protocol_auth.c
@@ -381,11 +381,11 @@ bool id_h(connection_t *c, const char *request) {
                if(experimental)
                        read_ecdsa_public_key(c);
                        /* Ignore failures if no key known yet */
-       } else {
-               if(c->protocol_minor && !ecdsa_active(c->ecdsa))
-                       c->protocol_minor = 1;
        }
 
+       if(c->protocol_minor && !ecdsa_active(c->ecdsa))
+               c->protocol_minor = 1;
+
        /* Forbid version rollback for nodes whose Ed25519 key we know */
 
        if(ecdsa_active(c->ecdsa) && c->protocol_minor < 2) {