{"action":"created","issue":{"url":"https://api.github.com/repos/openssl/openssl/issues/852","repository_url":"https://api.github.com/repos/openssl/openssl","labels_url":"https://api.github.com/repos/openssl/openssl/issues/852/labels{/name}","comments_url":"https://api.github.com/repos/openssl/openssl/issues/852/comments","events_url":"https://api.github.com/repos/openssl/openssl/issues/852/events","html_url":"https://github.com/openssl/openssl/pull/852","id":140327478,"number":852,"title":"statem_clnt: do not override version on sess reuse","user":{"login":"indutny","id":238531,"avatar_url":"https://avatars.githubusercontent.com/u/238531?v=3","gravatar_id":"","url":"https://api.github.com/users/indutny","html_url":"https://github.com/indutny","followers_url":"https://api.github.com/users/indutny/followers","following_url":"https://api.github.com/users/indutny/following{/other_user}","gists_url":"https://api.github.com/users/indutny/gists{/gist_id}","starred_url":"https://api.github.com/users/indutny/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/indutny/subscriptions","organizations_url":"https://api.github.com/users/indutny/orgs","repos_url":"https://api.github.com/users/indutny/repos","events_url":"https://api.github.com/users/indutny/events{/privacy}","received_events_url":"https://api.github.com/users/indutny/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":41,"created_at":"2016-03-12T00:49:41Z","updated_at":"2016-03-24T21:35:49Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/openssl/openssl/pulls/852","html_url":"https://github.com/openssl/openssl/pull/852","diff_url":"https://github.com/openssl/openssl/pull/852.diff","patch_url":"https://github.com/openssl/openssl/pull/852.patch"},"body":"Allow downgrading when reusing sessions on client\r\n\r\nWhen connecting to pool of diverse servers (both TLS1.0 and TLS1.2), a\r\nfollowing scenario may happen:\r\n\r\n  1. Connect to TLS1.2 server, receive new session\r\n  2. Store this session\r\n  3. Attempt to reuse it later when connecting to server\r\n  4. Connect to different server from the pool, which speaks only TLS1.0\r\n  5. Get `SSL_R_WRONG_VERSION_NUMBER` error\r\n\r\nExpected behavior would be scrapping off the session, and allowing\r\nserver to downgrade to supported protocol version the way it would do it\r\nif no client session would be supplied.\r\n\r\ncc @mattcaswell \r\n\r\nSupersedes #603 "},"comment":{"url":"https://api.github.com/repos/openssl/openssl/issues/comments/201034793","html_url":"https://github.com/openssl/openssl/pull/852#issuecomment-201034793","issue_url":"https://api.github.com/repos/openssl/openssl/issues/852","id":201034793,"user":{"login":"kroeckx","id":1616242,"avatar_url":"https://avatars.githubusercontent.com/u/1616242?v=3","gravatar_id":"","url":"https://api.github.com/users/kroeckx","html_url":"https://github.com/kroeckx","followers_url":"https://api.github.com/users/kroeckx/followers","following_url":"https://api.github.com/users/kroeckx/following{/other_user}","gists_url":"https://api.github.com/users/kroeckx/gists{/gist_id}","starred_url":"https://api.github.com/users/kroeckx/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kroeckx/subscriptions","organizations_url":"https://api.github.com/users/kroeckx/orgs","repos_url":"https://api.github.com/users/kroeckx/repos","events_url":"https://api.github.com/users/kroeckx/events{/privacy}","received_events_url":"https://api.github.com/users/kroeckx/received_events","type":"User","site_admin":false},"created_at":"2016-03-24T21:35:49Z","updated_at":"2016-03-24T21:35:49Z","body":"I was getting confused because of how wireshark showed things.  It's showing the ServerHello after we've send back the alert message to it, because we didn't receive the whole ServerHello message in a single packet."}}