From: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date: Tue, 12 Jan 2010 19:24:06 +0000 (+0100)
Subject: When denying an initial negotiation due to missing safe renegotiation
X-Git-Tag: gnutls_2_9_10~171
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=2a1121f9d91d1b7eda7090b2060a2467fff98153;p=thirdparty%2Fgnutls.git

When denying an initial negotiation due to missing safe renegotiation
extension reply with NO_RENEGOTIATION alert.
---

diff --git a/lib/gnutls_handshake.c b/lib/gnutls_handshake.c
index 3620a2991a..41a9f0e8ff 100644
--- a/lib/gnutls_handshake.c
+++ b/lib/gnutls_handshake.c
@@ -2430,6 +2430,15 @@ _gnutls_recv_hello (gnutls_session_t session, opaque * data, int datalen)
 	    {
 	      gnutls_assert();
 	      _gnutls_handshake_log ("Denying unsafe renegotiation.\n");
+	      ret = gnutls_alert_send (session, GNUTLS_AL_WARNING,
+				   GNUTLS_A_NO_RENEGOTIATION);
+
+  	      if (ret < 0)
+	        {
+	          gnutls_assert ();
+	          return ret;
+	        }
+
 	      return GNUTLS_E_SAFE_RENEGOTIATION_FAILED;
 	    }
 	}