net/third_party/nss/patches/ignorechangecipherspec.patch

   1 Index: ssl/ssl3con.c
   2 ===================================================================
   3 --- ssl/ssl3con.c       (revision 274314)
   4 +++ ssl/ssl3con.c       (working copy)
   5 @@ -3621,6 +3621,14 @@
   6                 SSL_GETPID(), ss->fd));
   7
   8      if (ws != wait_change_cipher) {
   9 +       if (IS_DTLS(ss)) {
  10 +           /* Ignore this because it's out of order. */
  11 +           SSL_TRC(3, ("%d: SSL3[%d]: discard out of order "
  12 +                       "DTLS change_cipher_spec",
  13 +                       SSL_GETPID(), ss->fd));
  14 +           buf->len = 0;
  15 +           return SECSuccess;
  16 +       }
  17         (void)SSL3_SendAlert(ss, alert_fatal, unexpected_message);
  18         PORT_SetError(SSL_ERROR_RX_UNEXPECTED_CHANGE_CIPHER);
  19         return SECFailure;