1 files changed, 18 insertions, 0 deletions
diff --git a/gnu/javax/net/ssl/provider/OutputSecurityParameters.java b/gnu/javax/net/ssl/provider/OutputSecurityParameters.java
index c6ed7d587..617424397 100644
--- a/gnu/javax/net/ssl/provider/OutputSecurityParameters.java
+++ b/gnu/javax/net/ssl/provider/OutputSecurityParameters.java
@@ -62,6 +62,17 @@ public class OutputSecurityParameters
   private final CipherSuite suite;
   private long sequence;
 
+  static final boolean enableCBCProtection;
+
+  static
+  {
+    String enabled = Util.getProperty("jsse.enableCBCProtection");
+    if (enabled == null)
+      enableCBCProtection = true;
+    else
+      enableCBCProtection = Boolean.valueOf(enabled);
+  }
+
   public OutputSecurityParameters (final Cipher cipher, final Mac mac,
                                    final Deflater deflater, SessionImpl session,
                                    CipherSuite suite)
@@ -291,4 +302,11 @@ public class OutputSecurityParameters
   {
     return suite;
   }
+
+  boolean needToSplitPayload()
+  {
+    return (session.version.compareTo(ProtocolVersion.TLS_1_1) < 0 &&
+            suite.isCBCMode() && enableCBCProtection);
+  }
+
 }