Don't specially handle unauthenticated close_notify alerts

rustls · Apr 19, 2024 · 0c6cd7e · 0c6cd7e
1 parent a1e28cd
commit 0c6cd7e
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/rustls/src/common_state.rs b/rustls/src/common_state.rs
@@ -439,8 +439,8 @@ impl CommonState {
         }
 
         // If we get a CloseNotify, make a note to declare EOF to our
-        // caller.
-        if alert.description == AlertDescription::CloseNotify {
+        // caller.  But do not treat unauthenticated alerts like this.
+        if self.may_receive_application_data && alert.description == AlertDescription::CloseNotify {
             self.has_received_close_notify = true;
             return Ok(());
         }