From beb30941d6b2d663144d74dc3846d5d49c127454 Mon Sep 17 00:00:00 2001 From: Matt Caswell Date: Mon, 16 Oct 2017 11:19:03 +0100 Subject: [PATCH] Tweak the comment regarding record version check with respect to TLSv1.3 Reviewed-by: Tim Hudson Reviewed-by: Ben Kaduk (Merged from https://github.com/openssl/openssl/pull/4527) --- ssl/record/ssl3_record.c | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/ssl/record/ssl3_record.c b/ssl/record/ssl3_record.c index e17b2f001a..518e7a8c3b 100644 --- a/ssl/record/ssl3_record.c +++ b/ssl/record/ssl3_record.c @@ -272,9 +272,10 @@ int ssl3_get_record(SSL *s) thisrr->rec_version = version; /* - * Lets check version. In TLSv1.3 we ignore this field. For an - * HRR we haven't actually selected TLSv1.3 yet, but we still - * treat it as TLSv1.3, so we must check for that explicitly + * Lets check version. In TLSv1.3 we ignore this field. For the + * ServerHello after an HRR we haven't actually selected TLSv1.3 + * yet, but we still treat it as TLSv1.3, so we must check for + * that explicitly */ if (!s->first_packet && !SSL_IS_TLS13(s) && !s->hello_retry_request -- 2.25.1