Expand comment in tls_process_hello_req()
Following review feedback.
Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2259)
diff --git a/ssl/statem/statem_clnt.c b/ssl/statem/statem_clnt.c
index cfc1047..9ce4ff6 100644
--- a/ssl/statem/statem_clnt.c
+++ b/ssl/statem/statem_clnt.c
@@ -3226,10 +3226,11 @@
}
/*
- * This is a historical discrepancy maintained for compatibility
- * reasons. If a TLS client receives a HelloRequest it will attempt
- * an abbreviated handshake. However if a DTLS client receives a
- * HelloRequest it will do a full handshake.
+ * This is a historical discrepancy (not in the RFC) maintained for
+ * compatibility reasons. If a TLS client receives a HelloRequest it will
+ * attempt an abbreviated handshake. However if a DTLS client receives a
+ * HelloRequest it will do a full handshake. Either behaviour is reasonable
+ * but doing one for TLS and another for DTLS is odd.
*/
if (SSL_IS_DTLS(s))
SSL_renegotiate(s);
