commit 195c0bc24edd7a6feeb2951d2d255f4482c8d323
author Ronald Cron <ronald.cron@arm.com> Thu Feb 08 08:51:20 2024 +0100
committer Ronald Cron <ronald.cron@arm.com> Thu Feb 08 11:54:55 2024 +0100
tree 30f3f8ae2ad59dff60210f48a84ef73a9b98df7d
parent 2f387e98a01eabb9ea39feb205e0d885855330ac

tls: Reset TLS maximum negotiable version

When reseting an SSL context with
mbedtls_ssl_session_reset() reset
the TLS maximum negotiable version
as configured.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>

library/ssl_tls.c

diff --git a/library/ssl_tls.c b/library/ssl_tls.c
index 0bc18f1..0071b06 100644
--- a/library/ssl_tls.c
+++ b/library/ssl_tls.c
@@ -1540,6 +1540,7 @@
     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;
 
     ssl->state = MBEDTLS_SSL_HELLO_REQUEST;
+    ssl->tls_version = ssl->conf->max_tls_version;
 
     mbedtls_ssl_session_reset_msg_layer(ssl, partial);