From 08931f1cd678ede5735825fb451fdb273a0177ed Mon Sep 17 00:00:00 2001 From: Bodo Moeller Date: Tue, 21 Oct 2014 22:32:30 +0200 Subject: [PATCH] When processing ClientHello.cipher_suites, don't ignore cipher suites listed after TLS_FALLBACK_SCSV. RT: 3575 Reviewed-by: Emilia Kasper --- ssl/ssl_lib.c | 1 + 1 file changed, 1 insertion(+) diff --git a/ssl/ssl_lib.c b/ssl/ssl_lib.c index 3f66fc061d..6e35534b81 100644 --- a/ssl/ssl_lib.c +++ b/ssl/ssl_lib.c @@ -1507,6 +1507,7 @@ STACK_OF(SSL_CIPHER) *ssl_bytes_to_cipher_list(SSL *s,unsigned char *p,int num, ssl3_send_alert(s,SSL3_AL_FATAL,SSL_AD_INAPPROPRIATE_FALLBACK); goto err; } + p += n; continue; } -- 2.25.1