Don't specially handle unauthenticated close_notify alerts

rustls · Apr 19, 2024 · 2f2aae1 · 2f2aae1
1 parent e163587
commit 2f2aae1
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/rustls/src/common_state.rs b/rustls/src/common_state.rs
@@ -445,8 +445,8 @@ impl CommonState {
         }
 
         // If we get a CloseNotify, make a note to declare EOF to our
-        // caller.
-        if alert.description == AlertDescription::CloseNotify {
+        // caller.  But do not treat unauthenticated alerts like this.
+        if self.may_receive_application_data && alert.description == AlertDescription::CloseNotify {
             self.has_received_close_notify = true;
             return Ok(());
         }