[GNUnet-SVN] r8149 - libmicrohttpd/src/daemon/https/tls

[gnunet]

Author: grothoff
Date: 2009-01-23 19:19:46 -0700 (Fri, 23 Jan 2009)
New Revision: 8149

Modified:
   libmicrohttpd/src/daemon/https/tls/gnutls_cipher.c
Log:
support NULL MAC properly

Modified: libmicrohttpd/src/daemon/https/tls/gnutls_cipher.c
===================================================================
--- libmicrohttpd/src/daemon/https/tls/gnutls_cipher.c  2009-01-24 02:09:43 UTC 
(rev 8148)
+++ libmicrohttpd/src/daemon/https/tls/gnutls_cipher.c  2009-01-24 02:19:46 UTC 
(rev 8149)
@@ -479,7 +479,8 @@
 
   /* HMAC was not the same.
    */
-  if (memcmp (MAC, &ciphertext.data[length], hash_size) != 0)
+  if ( (td != GNUTLS_MAC_FAILED) &&
+       (memcmp (MAC, &ciphertext.data[length], hash_size) != 0) )
     {
       MHD_gnutls_assert ();
       return GNUTLS_E_DECRYPTION_FAILED;