From 34bb3178dc6005cb170c6f002dfd49e503c94bf8 Mon Sep 17 00:00:00 2001
From: jsing <>
Date: Sat, 6 Jun 2026 15:24:26 +0000
Subject: Move DTLS change cipher spec handling to its own function.

When a TLSv1.2 change cipher spec message has been built, call a separate
function that can handle the DTLS specific processing rather than including
this in the TLS code.

ok kenjiro@ tb@
---
 src/lib/libssl/ssl_srvr.c | 9 +++------
 1 file changed, 3 insertions(+), 6 deletions(-)

(limited to 'src/lib/libssl/ssl_srvr.c')

diff --git a/src/lib/libssl/ssl_srvr.c b/src/lib/libssl/ssl_srvr.c
index f9c4ef918a..73bdeacce0 100644
--- a/src/lib/libssl/ssl_srvr.c
+++ b/src/lib/libssl/ssl_srvr.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl_srvr.c,v 1.169 2026/05/31 14:34:44 jsing Exp $ */
+/* $OpenBSD: ssl_srvr.c,v 1.170 2026/06/06 15:24:26 jsing Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -2321,11 +2321,8 @@ ssl3_send_server_change_cipher_spec(SSL *s)
 		s->init_off = 0;
 
 		if (SSL_is_dtls(s)) {
-			s->d1->handshake_write_seq =
-			    s->d1->next_handshake_write_seq;
-			dtls1_set_message_header_int(s, SSL3_MT_CCS, 0,
-			    s->d1->handshake_write_seq, 0, 0);
-			dtls1_buffer_message(s, 1);
+			if (!dtls12_ccs_built(s))
+				goto err;
 		}
 
 		s->s3->hs.state = SSL3_ST_SW_CHANGE_B;
-- 
cgit v1.2.3-55-g6feb