Allow record layer packets with version less than the negotiated.

Allowing such records avoids issue in DTLS client hello request verification.

diff --git a/lib/gnutls_record.c b/lib/gnutls_record.c
index ca9376e7abc3726bb09d79a84463647ac38aa65e..149a8ea8e2a9a9af896762a50c16c0214931b30a 100644 (file)
--- a/lib/gnutls_record.c
+++ b/lib/gnutls_record.c
@@ -661,7 +661,7 @@ record_check_version (gnutls_session_t session,
         }
     }
   else if (htype != GNUTLS_HANDSHAKE_SERVER_HELLO &&
-           gnutls_protocol_get_version (session) !=
+           gnutls_protocol_get_version (session) <
            _gnutls_version_get (version[0], version[1]))
     {
       /* Reject record packets that have a different version than the