[openssl-commits] [openssl] OpenSSL_1_1_0-stable update

[Rich Salz]

The branch OpenSSL_1_1_0-stable has been updated
       via  73a5150689571fb8374320a298c4082778d238f3 (commit)
      from  df8dca7ac8d71b2fe5ec3a378c547dbfeb081d7e (commit)


- Log -----------------------------------------------------------------
commit 73a5150689571fb8374320a298c4082778d238f3
Author: EasySec <Easy.Sec at free.fr>
Date:   Sat Nov 5 22:56:13 2016 +0100

    When no SRP identity is found, no error was reported server side
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    Reviewed-by: Rich Salz <rsalz at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/1859)
    
    (cherry picked from commit 7bb37cb5938a0cf76c12c8421950e72634d5f61c)

-----------------------------------------------------------------------

Summary of changes:
 ssl/statem/statem_srvr.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/ssl/statem/statem_srvr.c b/ssl/statem/statem_srvr.c
index 19ceda5..9327654 100644
--- a/ssl/statem/statem_srvr.c
+++ b/ssl/statem/statem_srvr.c
@@ -1483,6 +1483,9 @@ WORK_STATE tls_post_process_client_hello(SSL *s, WORK_STATE wst)
             if (al != TLS1_AD_UNKNOWN_PSK_IDENTITY)
                 SSLerr(SSL_F_TLS_POST_PROCESS_CLIENT_HELLO,
                        SSL_R_CLIENTHELLO_TLSEXT);
+            else
+                SSLerr(SSL_F_TLS_POST_PROCESS_CLIENT_HELLO,
+                       SSL_R_PSK_IDENTITY_NOT_FOUND);
             goto f_err;
         }
     }