Correct failure when renegotiating with old server

When renegotiating the client checks that the server hasn't
changed its mind about supporting the renegotiation extension
(this is a likely indicator of an attack).

However due to a typo the client was actually comparing the
value in the client hello of the first handshake against the
server hello in the renegotiation handshake. Since Botan always
sends the renegotiation extension, this would cause the check to
fail when renegotiating with an old server that doesn't support
the renegotiation extension.

Reported on mailing list by Falko Strenzke. Tested patch against
OpenSSL 0.9.8k

0 files changed, 0 insertions, 0 deletions