diff --git a/src/tls_wrap.cc b/src/tls_wrap.cc index d9f916f3d16..f55f8ca3179 100644 --- a/src/tls_wrap.cc +++ b/src/tls_wrap.cc @@ -222,7 +222,10 @@ void TLSWrap::SSLInfoCallback(const SSL* ssl_, int where, int ret) { } } - if (where & SSL_CB_HANDSHAKE_DONE) { + // SSL_CB_HANDSHAKE_START and SSL_CB_HANDSHAKE_DONE are called + // sending HelloRequest in OpenSSL-1.1.1. + // We need to check whether this is in a renegotiation state or not. + if (where & SSL_CB_HANDSHAKE_DONE && !SSL_renegotiate_pending(ssl)) { Local callback; c->established_ = true;