Wrong identifier used to check Encrypt-then-MAC flag

This commit fixes a comparison of ssl_session->encrypt_then_mac against the
ETM-unrelated constant SSL_EXTENDED_MS_DISABLED. Instead, SSL_ETM_DISABLED
should be used.

The typo is has no functional effect since both constants have the same value 0.
This commit is contained in:
Hanno Becker 2017-10-23 10:28:28 +01:00
parent 75ea35eac8
commit c2f52b4b7b

View file

@ -1963,7 +1963,7 @@ static void ssl_write_encrypt_then_mac_ext( ssl_context *ssl,
const ssl_ciphersuite_t *suite = NULL;
const cipher_info_t *cipher = NULL;
if( ssl->session_negotiate->encrypt_then_mac == SSL_EXTENDED_MS_DISABLED ||
if( ssl->session_negotiate->encrypt_then_mac == SSL_ETM_DISABLED ||
ssl->minor_ver == SSL_MINOR_VERSION_0 )
{
*olen = 0;