Index: net/socket/ssl_client_socket_nss.cc |
diff --git a/net/socket/ssl_client_socket_nss.cc b/net/socket/ssl_client_socket_nss.cc |
index 8ec932ae64779eac226def47dda25246f65a2c6f..92660d8352262d13a83cb6f103fad5ad4adee0a7 100644 |
--- a/net/socket/ssl_client_socket_nss.cc |
+++ b/net/socket/ssl_client_socket_nss.cc |
@@ -3353,6 +3353,11 @@ int SSLClientSocketNSS::DoHandshakeComplete(int result) { |
EnterFunction(result); |
if (result == OK) { |
+ if (ssl_config_.version_fallback && |
+ ssl_config_.version_max < ssl_config_.version_fallback_min) { |
+ return ERR_SSL_FALLBACK_BEYOND_MINIMUM_VERSION; |
+ } |
+ |
// SSL handshake is completed. Let's verify the certificate. |
GotoState(STATE_VERIFY_CERT); |
// Done! |