From 6b2a62a4fc99f33c220aeed0cdd7ee0508c336ff Mon Sep 17 00:00:00 2001 From: Ingela Andin Date: Tue, 26 Apr 2022 08:56:43 +0200 Subject: Update lib/ssl/src/tls_gen_connection.erl --- lib/ssl/src/tls_gen_connection.erl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/ssl/src/tls_gen_connection.erl b/lib/ssl/src/tls_gen_connection.erl index 9f1bd94420..cff0abdcb3 100644 --- a/lib/ssl/src/tls_gen_connection.erl +++ b/lib/ssl/src/tls_gen_connection.erl @@ -756,7 +756,7 @@ next_record_done(#state{protocol_buffers = Buffers} = State, CipherTexts, Connec %% the requested version. On the server side the same variable is initially undefined. %% When the client can support TLS-1.3 and one or more prior versions and we are waiting %% for the server hello (with or without a RetryRequest, that is in state hello or in state wait_sh), -%% the "initial requested version" kept in the connection state variable negotiated_version +%% the "initial requested version" kept in the connection state variable `negotiated_version` %% (before the versions is actually negotiated) will always be the value of TLS-1.2 (which is a legacy %% field in TLS-1.3 client hello). The versions are instead negotiated with an hello extension. When %% decoding the server_hello messages we want to go through TLS-1.3 decode functions to be able -- cgit v1.2.1