commit 2d8800e2278bcf7a39a14a88bc7a36724ad26f79
author TRodziewicz <tomasz.rodziewicz@mobica.com> Thu May 13 19:14:19 2021 +0200
committer TRodziewicz <tomasz.rodziewicz@mobica.com> Mon May 24 12:49:24 2021 +0200
tree a5659ff8c5989a7a579009b86d894902eb05796d
parent b5850c52166351c43eb65bc71266c6c6984dd992

Small corrections in the comments

Signed-off-by: TRodziewicz <tomasz.rodziewicz@mobica.com>

library/ssl_cli.c

diff --git a/library/ssl_cli.c b/library/ssl_cli.c
index b0285d7..81c0d6b 100644
--- a/library/ssl_cli.c
+++ b/library/ssl_cli.c
@@ -1951,6 +1951,10 @@
     mbedtls_ssl_read_version( &major_ver, &minor_ver, ssl->conf->transport, p );
     p += 2;
 
+    /*
+     * Since the RFC is not clear on this point, accept DTLS 1.0 (TLS 1.1)
+     * even is lower than our min version.
+     */
     if( major_ver < MBEDTLS_SSL_MAJOR_VERSION_3 ||
         minor_ver < MBEDTLS_SSL_MINOR_VERSION_2 ||
         major_ver > ssl->conf->max_major_ver  ||

library/ssl_msg.c

diff --git a/library/ssl_msg.c b/library/ssl_msg.c
index 8c9caa9..9896ad0 100644
--- a/library/ssl_msg.c
+++ b/library/ssl_msg.c
@@ -836,7 +836,7 @@
 
 #if defined(MBEDTLS_SSL_PROTO_TLS1_2)
         /*
-         * Prepend per-record IV for block cipher in TLS v1.2
+         * Prepend per-record IV for block cipher in TLS v1.2 as per
          * Method 1 (6.2.3.2. in RFC4346 and RFC5246)
          */
         if( transform->minor_ver >= MBEDTLS_SSL_MINOR_VERSION_3 )