commit 188c8de430444a06f9931c6ab46bba493a501961
author Paul Bakker <p.j.bakker@polarssl.org> Fri Apr 19 09:13:37 2013 +0200
committer Paul Bakker <p.j.bakker@polarssl.org> Fri Apr 19 09:13:37 2013 +0200
tree adc339ebe9d1b036d14c65ce63cff7792e15602d
parent bcbe2d8d816e42b598e987ef16e39795fc6fd41d

Only allow missing SereverKeyExchange message in bare PSK mode

library/ssl_cli.c

diff --git a/library/ssl_cli.c b/library/ssl_cli.c
index a4cc3d7..ff467f3 100644
--- a/library/ssl_cli.c
+++ b/library/ssl_cli.c
@@ -948,8 +948,14 @@
 
     if( ssl->in_msg[0] != SSL_HS_SERVER_KEY_EXCHANGE )
     {
-        ssl->record_read = 1;
-        goto exit;
+        if( ciphersuite_info->key_exchange == POLARSSL_KEY_EXCHANGE_PSK )
+        {
+            ssl->record_read = 1;
+            goto exit;
+        }
+
+        SSL_DEBUG_MSG( 1, ( "bad server key exchange message" ) );
+        return( POLARSSL_ERR_SSL_UNEXPECTED_MESSAGE );
     }
 
     SSL_DEBUG_BUF( 3,   "server key exchange", ssl->in_msg + 4, ssl->in_hslen - 4 );