Handle failure to agree DTLS cipher more gracefully

Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
sailfishos-mirror · Apr 24, 2009 · 7512134 · 7512134
1 parent 2f520bc
commit 7512134
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/dtls.c b/dtls.c
@@ -110,6 +110,12 @@ int connect_dtls_socket(struct openconnect_info *vpninfo)
 	BIO *dtls_bio;
 	int dtls_fd;
 
+	if (!vpninfo->dtls_cipher) {
+		/* We probably didn't offer it any ciphers it liked */
+		vpninfo->progress(vpninfo, PRG_ERR, "Server offered no DTLS cipher option\n");
+		return -EINVAL;
+	}
+
 	dtls_fd = socket(vpninfo->peer_addr->sa_family, SOCK_DGRAM, IPPROTO_UDP);
 	if (dtls_fd < 0) {
 		perror("Open UDP socket for DTLS:");