tree e12f4831bf8a842b90d16b9e9fb7df6aefb7bfc9
parent 762e1d039c1d85e4651700eed82801878a9a86bc
author David Benjamin <davidben@google.com> 1458763844 -0400
committer David Benjamin <davidben@google.com> 1459180897 +0000

Use ssl3_is_version_enabled to skip offering sessions.

We do an ad-hoc upper-bound check, but if the version is too low, we also
shouldn't offer the session. This isn't fatal to the connection and doesn't
have issues (we'll check the version later regardless), but offering a session
we're never going to accept is pointless. The check should match what we do in
ServerHello.

Credit to Matt Caswell for noticing the equivalent issue in an OpenSSL pull
request.

Change-Id: I17a4efd37afa63b34fca53f4c9b7ac3ae2fa3336
Reviewed-on: https://boringssl-review.googlesource.com/7543
Reviewed-by: David Benjamin <davidben@google.com>