From: Rob Stradling <rob@comodo.com>
Date: Tue, 10 Sep 2013 11:21:27 +0000 (+0100)
Subject: Use TLS version supplied by client when fingerprinting Safari.
X-Git-Tag: master-post-reformat~1184
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=378341e192b86e4a95d8a7765913fa74d1acf1c5;p=oweals%2Fopenssl.git

Use TLS version supplied by client when fingerprinting Safari.
---

diff --git a/ssl/t1_lib.c b/ssl/t1_lib.c
index a471995a19..c46e71179a 100644
--- a/ssl/t1_lib.c
+++ b/ssl/t1_lib.c
@@ -1869,7 +1869,7 @@ static void ssl_check_for_safari(SSL *s, const unsigned char *data, const unsign
 		return;
 	data += size;
 
-	if (TLS1_get_version(s) >= TLS1_2_VERSION)
+	if (TLS1_get_client_version(s) >= TLS1_2_VERSION)
 		{
 		const size_t len1 = sizeof(kSafariExtensionsBlock);
 		const size_t len2 = sizeof(kSafariTLS12ExtensionsBlock);