Tweak the comment regarding record version check with respect to TLSv1.3 Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Ben Kaduk <kaduk@mit.edu> (Merged from https://github.com/openssl/openssl/pull/4527)
diff --git a/ssl/record/ssl3_record.c b/ssl/record/ssl3_record.c index e17b2f0..518e7a8 100644 --- a/ssl/record/ssl3_record.c +++ b/ssl/record/ssl3_record.c
@@ -272,9 +272,10 @@ thisrr->rec_version = version; /* - * Lets check version. In TLSv1.3 we ignore this field. For an - * HRR we haven't actually selected TLSv1.3 yet, but we still - * treat it as TLSv1.3, so we must check for that explicitly + * Lets check version. In TLSv1.3 we ignore this field. For the + * ServerHello after an HRR we haven't actually selected TLSv1.3 + * yet, but we still treat it as TLSv1.3, so we must check for + * that explicitly */ if (!s->first_packet && !SSL_IS_TLS13(s) && !s->hello_retry_request