hddfg

I tested 3.0.14 and 3.3.1 and both had the same problem.

For your reply, I agree to ignore the invalid fragment, but after ignoring it, I continue to call SSL_connect to read the rest of fragments, but actually the body of...

In another scenario, when the function dtls1_process_out_of_seq_message statem_dtls.c:719 returns a failure, the error code obtained by using SSL_get_error is SSL_ERROR_SYSCALL. Generally, the message is ignored. However, the error code is...

> > It is not clear to me that simply ignoring the invalid fragment is not correct behaviour. Isn't that what one might expect in light of https://datatracker.ietf.org/doc/html/rfc6347#section-4.1.2.1 and https://datatracker.ietf.org/doc/html/rfc6347#section-4.1.2.7?...

@mattcaswell > > > In another scenario, when the function dtls1_process_out_of_seq_message statem_dtls.c:719 returns a failure, the error code obtained by using SSL_get_error is SSL_ERROR_SYSCALL. Generally, the message is ignored. However,...