diff --git a/ssl/t1_lib.c b/ssl/t1_lib.c index 9e28c256..d3001575 100644 --- a/ssl/t1_lib.c +++ b/ssl/t1_lib.c @@ -2982,8 +2982,11 @@ int ssl_parse_serverhello_tlsext(SSL *s, PACKET *pkt) { int al = -1; - if (s->version < SSL3_VERSION) + if (s->version < SSL3_VERSION){ + // jump over the ext block + packet_forward(pkt, pkt->remaining); return 1; +} if (ssl_scan_serverhello_tlsext(s, pkt, &al) <= 0) { ssl3_send_alert(s, SSL3_AL_FATAL, al);