diff options
Diffstat (limited to 'src/lib/libssl/ssl_srvr.c')
| -rw-r--r-- | src/lib/libssl/ssl_srvr.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/lib/libssl/ssl_srvr.c b/src/lib/libssl/ssl_srvr.c index 73bdeacce0..43260d8065 100644 --- a/src/lib/libssl/ssl_srvr.c +++ b/src/lib/libssl/ssl_srvr.c | |||
| @@ -1,4 +1,4 @@ | |||
| 1 | /* $OpenBSD: ssl_srvr.c,v 1.170 2026/06/06 15:24:26 jsing Exp $ */ | 1 | /* $OpenBSD: ssl_srvr.c,v 1.171 2026/08/21 17:15:22 tb Exp $ */ |
| 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) |
| 3 | * All rights reserved. | 3 | * All rights reserved. |
| 4 | * | 4 | * |
| @@ -1027,7 +1027,7 @@ ssl3_get_client_hello(SSL *s) | |||
| 1027 | if (s->s3->hs.our_max_tls_version >= TLS1_2_VERSION && | 1027 | if (s->s3->hs.our_max_tls_version >= TLS1_2_VERSION && |
| 1028 | s->s3->hs.negotiated_tls_version < s->s3->hs.our_max_tls_version) { | 1028 | s->s3->hs.negotiated_tls_version < s->s3->hs.our_max_tls_version) { |
| 1029 | /* | 1029 | /* |
| 1030 | * RFC 8446 section 4.1.3. If we are downgrading from TLS 1.3 | 1030 | * RFC 9846 section 4.2.3. If we are downgrading from TLS 1.3 |
| 1031 | * we must set the last 8 bytes of the server random to magical | 1031 | * we must set the last 8 bytes of the server random to magical |
| 1032 | * values to indicate we meant to downgrade. For TLS 1.2 it is | 1032 | * values to indicate we meant to downgrade. For TLS 1.2 it is |
| 1033 | * recommended that we do the same. | 1033 | * recommended that we do the same. |