From 722521594cfec2d972f0773f6d82c69cda4a621c Mon Sep 17 00:00:00 2001
From: "Dr. Stephen Henson" <steve@openssl.org>
Date: Tue, 4 Jan 2011 19:39:27 +0000
Subject: [PATCH] Don't use decryption_failed alert for TLS v1.1 or later.
---
ssl/t1_enc.c | 2 ++
1 file changed, 2 insertions(+)
diff --git a/ssl/t1_enc.c b/ssl/t1_enc.c
index 2b3fd30e42..c418d3217a 100644
--- a/ssl/t1_enc.c
+++ b/ssl/t1_enc.c
@@ -757,6 +757,8 @@ int tls1_enc(SSL *s, int send)
{
if (l == 0 || l%bs != 0)
{
+ if (s->version >= TLS1_1_VERSION)
+ return -1;
SSLerr(SSL_F_TLS1_ENC,SSL_R_BLOCK_CIPHER_PAD_IS_WRONG);
ssl3_send_alert(s,SSL3_AL_FATAL,SSL_AD_DECRYPTION_FAILED);
return 0;
--
2.25.1