From: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date: Sun, 19 May 2013 11:18:04 +0000 (+0200)
Subject: Allow record layer packets with version less than the negotiated.
X-Git-Tag: gnutls_3_2_1~42
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=a4d7bc275f17febac14edf565a6ef8a91906c71b;p=thirdparty%2Fgnutls.git

Allow record layer packets with version less than the negotiated.

Allowing such records avoids issue in DTLS client hello request verification.
---

diff --git a/lib/gnutls_record.c b/lib/gnutls_record.c
index ca9376e7ab..149a8ea8e2 100644
--- a/lib/gnutls_record.c
+++ b/lib/gnutls_record.c
@@ -661,7 +661,7 @@ record_check_version (gnutls_session_t session,
         }
     }
   else if (htype != GNUTLS_HANDSHAKE_SERVER_HELLO &&
-           gnutls_protocol_get_version (session) !=
+           gnutls_protocol_get_version (session) <
            _gnutls_version_get (version[0], version[1]))
     {
       /* Reject record packets that have a different version than the