diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2011-01-04 20:39:27 +0100 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2011-01-04 20:39:27 +0100 |
| commit | 722521594cfec2d972f0773f6d82c69cda4a621c (patch) | |
| tree | 56c1dae24393aa2c4134d7f84bc3b9dc1f056718 /ssl/t1_enc.c | |
| parent | Since DTLS 1.0 is based on TLS 1.1 we should never return a decryption_failed (diff) | |
| download | openssl-722521594cfec2d972f0773f6d82c69cda4a621c.tar.xz openssl-722521594cfec2d972f0773f6d82c69cda4a621c.zip | |
Don't use decryption_failed alert for TLS v1.1 or later.
Diffstat (limited to 'ssl/t1_enc.c')
| -rw-r--r-- | ssl/t1_enc.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/ssl/t1_enc.c b/ssl/t1_enc.c index 2b3fd30e42..c418d3217a 100644 --- a/ssl/t1_enc.c +++ b/ssl/t1_enc.c @@ -757,6 +757,8 @@ int tls1_enc(SSL *s, int send) { if (l == 0 || l%bs != 0) { + if (s->version >= TLS1_1_VERSION) + return -1; SSLerr(SSL_F_TLS1_ENC,SSL_R_BLOCK_CIPHER_PAD_IS_WRONG); ssl3_send_alert(s,SSL3_AL_FATAL,SSL_AD_DECRYPTION_FAILED); return 0; |