Retry callback only after ClientHello received.

diff --git a/ssl/s3_srvr.c b/ssl/s3_srvr.c
index 3f43dcc4be4fef96c3322e0ba50fe2e104827836..a787c6d32d8c004abe6ca68406e76c082aa9fb0b 100644 (file)
--- a/ssl/s3_srvr.c
+++ b/ssl/s3_srvr.c
@@ -949,7 +949,7 @@ int ssl3_get_client_hello(SSL *s)
 #endif
        STACK_OF(SSL_CIPHER) *ciphers=NULL;
 
-       if (s->state == SSL3_ST_SR_CLNT_HELLO_C)
+       if (s->state == SSL3_ST_SR_CLNT_HELLO_C && !s->first_packet)
                goto retry_cert;
 
        /* We do this so that we will respond with our native type.