summaryrefslogtreecommitdiff
path: root/lib/ext
diff options
context:
space:
mode:
authorDaiki Ueno <dueno@redhat.com>2018-11-01 13:43:17 +0100
committerDaiki Ueno <dueno@redhat.com>2018-11-01 13:43:17 +0100
commitba4c0ced0159c1fc871c5c61a24b7e6927bbe9b1 (patch)
tree1cb11941ae2e54595301454a625c6d4491da3afd /lib/ext
parentc7cabc18e193d556583d4adb1905d79602d0f8b0 (diff)
downloadgnutls-ba4c0ced0159c1fc871c5c61a24b7e6927bbe9b1.tar.gz
ext/record_size_limit: handle the extension in TLS 1.2 ServerHellotmp-fix-record-size-limit-tls12
Previously it had assumed that TLS 1.2 servers don't send the extension, while actually it can be present in ServerHello. Signed-off-by: Daiki Ueno <dueno@redhat.com>
Diffstat (limited to 'lib/ext')
-rw-r--r--lib/ext/record_size_limit.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/ext/record_size_limit.c b/lib/ext/record_size_limit.c
index bb8d0c4d97..811e2ea93f 100644
--- a/lib/ext/record_size_limit.c
+++ b/lib/ext/record_size_limit.c
@@ -41,7 +41,7 @@ const hello_ext_entry_st ext_mod_record_size_limit = {
.gid = GNUTLS_EXTENSION_RECORD_SIZE_LIMIT,
.parse_type = GNUTLS_EXT_TLS,
.validity = GNUTLS_EXT_FLAG_TLS | GNUTLS_EXT_FLAG_DTLS | GNUTLS_EXT_FLAG_CLIENT_HELLO |
- GNUTLS_EXT_FLAG_EE,
+ GNUTLS_EXT_FLAG_EE | GNUTLS_EXT_FLAG_TLS12_SERVER_HELLO,
.recv_func = _gnutls_record_size_limit_recv_params,
.send_func = _gnutls_record_size_limit_send_params
};