Support TLS_FALLBACK_SCSV.

[openssl.git] / ssl / s23_srvr.c

diff --git a/ssl/s23_srvr.c b/ssl/s23_srvr.c
index 75d814250b864e5da45a2c5ce26a6d6fac6c5191..6e0746691c88140c0d461d190dac8637f2e58f3b 100644 (file)
--- a/ssl/s23_srvr.c
+++ b/ssl/s23_srvr.c
@@ -421,6 +421,9 @@ int ssl23_get_client_hello(SSL *s)
                        }
                }
 
+       /* ensure that TLS_MAX_VERSION is up-to-date */
+       OPENSSL_assert(s->version <= TLS_MAX_VERSION);
+
        if (s->version < TLS1_2_VERSION && tls1_suiteb(s))
                {
                SSLerr(SSL_F_SSL23_GET_CLIENT_HELLO,