1 diff -pu a/nss/lib/ssl/ssl3con.c b/nss/lib/ssl/ssl3con.c 2 --- a/nss/lib/ssl/ssl3con.c 2013-07-31 12:07:10.964699464 -0700 3 +++ b/nss/lib/ssl/ssl3con.c 2013-07-31 12:29:07.903829188 -0700 4 @@ -4773,9 +4773,9 @@ ssl3_SendClientHello(sslSocket *ss, PRBo 5 return SECFailure; /* ssl3_config_match_init has set error code. */ 6 7 /* HACK for SCSV in SSL 3.0. On initial handshake, prepend SCSV, 8 - * only if we're willing to complete an SSL 3.0 handshake. 9 + * only if TLS is disabled. 10 */ 11 - if (!ss->firstHsDone && ss->vrange.min == SSL_LIBRARY_VERSION_3_0) { 12 + if (!ss->firstHsDone && !isTLS) { 13 /* Must set this before calling Hello Extension Senders, 14 * to suppress sending of empty RI extension. 15 */ 16
