X-Git-Url: https://git.openssl.org/?p=openssl.git;a=blobdiff_plain;f=ssl%2Fssl_ciph.c;h=4d87d2dbc4bf7f4b0b8a8f13c39e9cf41fe79e9b;hp=7f3e16080b0a4b740d9235a9c31e795c611cff60;hb=4842dde80c6846518df9d1b8fe9dba6db217ffdc;hpb=f91926a2409e96ffe8eb6f6233aaeb6c6a213112

diff --git a/ssl/ssl_ciph.c b/ssl/ssl_ciph.c
index 7f3e16080b..4d87d2dbc4 100644
--- a/ssl/ssl_ciph.c
+++ b/ssl/ssl_ciph.c
@@ -1379,6 +1379,13 @@ static int check_suiteb_cipher_list(const SSL_METHOD *meth, CERT *c,
 		return 1;
 	/* Check version */
 
+	if (meth->version != TLS1_2_VERSION)
+		{
+		SSLerr(SSL_F_CHECK_SUITEB_CIPHER_LIST,
+				SSL_R_ONLY_TLS_1_2_ALLOWED_IN_SUITEB_MODE);
+		return 0;
+		}
+
 	switch(suiteb_flags)
 		{
 	case SSL_CERT_FLAG_SUITEB_128_LOS: