commit 684b0592cb8bc41df13a3a7f01a3fabf58fdbd1b
author Manuel Pégourié-Gonnard <mpg@elzevir.fr> Wed May 06 09:27:31 2015 +0100
committer Manuel Pégourié-Gonnard <mpg@elzevir.fr> Thu May 07 10:19:13 2015 +0100
tree 11c4f8cb6cee44cb904ea43d7c047a61abdf19b4
parent 6bf89d6ad99a9eb8813bfbfa4c788b5a2aff8808

Move ssl_set_fallback() to work on conf

Initially thought it would be per-connection, but since max_version is in conf
too, and you need to lower that for a fallback connection, the fallback flag
should be in the same place

library/ssl_cli.c

diff --git a/library/ssl_cli.c b/library/ssl_cli.c
index 354cc5a..bbc8838 100644
--- a/library/ssl_cli.c
+++ b/library/ssl_cli.c
@@ -733,7 +733,7 @@
 
     /* Some versions of OpenSSL don't handle it correctly if not at end */
 #if defined(MBEDTLS_SSL_FALLBACK_SCSV)
-    if( ssl->fallback == MBEDTLS_SSL_IS_FALLBACK )
+    if( ssl->conf->fallback == MBEDTLS_SSL_IS_FALLBACK )
     {
         MBEDTLS_SSL_DEBUG_MSG( 3, ( "adding FALLBACK_SCSV" ) );
         *p++ = (unsigned char)( MBEDTLS_SSL_FALLBACK_SCSV_VALUE >> 8 );

library/ssl_tls.c

diff --git a/library/ssl_tls.c b/library/ssl_tls.c
index e93182c..f72a2c4 100644
--- a/library/ssl_tls.c
+++ b/library/ssl_tls.c
@@ -5569,9 +5569,9 @@
 }
 
 #if defined(MBEDTLS_SSL_FALLBACK_SCSV) && defined(MBEDTLS_SSL_CLI_C)
-void mbedtls_ssl_set_fallback( mbedtls_ssl_context *ssl, char fallback )
+void mbedtls_ssl_set_fallback( mbedtls_ssl_config *conf, char fallback )
 {
-    ssl->fallback = fallback;
+    conf->fallback = fallback;
 }
 #endif