Index: net/socket/ssl_client_socket_nss.cc |
diff --git a/net/socket/ssl_client_socket_nss.cc b/net/socket/ssl_client_socket_nss.cc |
index c5869fc3503a5ddfa53abb1b9ba0aecbabbfb442..f0d2240c5908bc540222c1cb08e8752e358f098c 100644 |
--- a/net/socket/ssl_client_socket_nss.cc |
+++ b/net/socket/ssl_client_socket_nss.cc |
@@ -3314,6 +3314,11 @@ int SSLClientSocketNSS::DoHandshakeComplete(int result) { |
EnterFunction(result); |
if (result == OK) { |
+ if (ssl_config_.version_fallback && |
+ ssl_config_.version_max < ssl_config_.version_fallback_min) { |
+ return ERR_SSL_NEEDS_MORE_FALLBACK; |
+ } |
+ |
// SSL handshake is completed. Let's verify the certificate. |
GotoState(STATE_VERIFY_CERT); |
// Done! |