From 4577b38d22429c1f21c5a675ba4a3e5b1a326e37 Mon Sep 17 00:00:00 2001 From: "Dr. Stephen Henson" Date: Tue, 4 Jan 2011 19:39:42 +0000 Subject: [PATCH] Don't use decryption_failed alert for TLS v1.1 or later. --- ssl/t1_enc.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/ssl/t1_enc.c b/ssl/t1_enc.c index 2b3fd30e42..c418d3217a 100644 --- a/ssl/t1_enc.c +++ b/ssl/t1_enc.c @@ -757,6 +757,8 @@ int tls1_enc(SSL *s, int send) { if (l == 0 || l%bs != 0) { + if (s->version >= TLS1_1_VERSION) + return -1; SSLerr(SSL_F_TLS1_ENC,SSL_R_BLOCK_CIPHER_PAD_IS_WRONG); ssl3_send_alert(s,SSL3_AL_FATAL,SSL_AD_DECRYPTION_FAILED); return 0; -- 2.50.1