Don't negotiate TLSv1.3 if our EC cert isn't TLSv1.3 capable

[openssl.git] / ssl / ssl_txt.c

diff --git a/ssl/ssl_txt.c b/ssl/ssl_txt.c
index 3856491ecab9ae5c667ae81efb68988a73cea5b7..cf6e4c3c05799f9199f8f6a03e4cc5ea8dc7e504 100644 (file)
--- a/ssl/ssl_txt.c
+++ b/ssl/ssl_txt.c
@@ -33,10 +33,11 @@ int SSL_SESSION_print(BIO *bp, const SSL_SESSION *x)
 {
     size_t i;
     const char *s;
 {
     size_t i;
     const char *s;

-    int istls13 = (x->ssl_version == TLS1_3_VERSION);
+    int istls13;

 
     if (x == NULL)
         goto err;
 
     if (x == NULL)
         goto err;

+    istls13 = (x->ssl_version == TLS1_3_VERSION);

     if (BIO_puts(bp, "SSL-Session:\n") <= 0)
         goto err;
     s = ssl_protocol_to_string(x->ssl_version);
     if (BIO_puts(bp, "SSL-Session:\n") <= 0)
         goto err;
     s = ssl_protocol_to_string(x->ssl_version);