diff --git a/ssl/test/runner/handshake_server.go b/ssl/test/runner/handshake_server.go index 41d588aa..89c7b8d6 100644 --- a/ssl/test/runner/handshake_server.go +++ b/ssl/test/runner/handshake_server.go @@ -327,13 +327,9 @@ func (hs *serverHandshakeState) checkForResumption() bool { return false } - if !c.config.Bugs.AllowSessionVersionMismatch { - if hs.sessionState.vers > hs.clientHello.vers { - return false - } - if vers, ok := c.config.mutualVersion(hs.sessionState.vers); !ok || vers != hs.sessionState.vers { - return false - } + // Never resume a session for a different SSL version. + if !c.config.Bugs.AllowSessionVersionMismatch && c.vers != hs.sessionState.vers { + return false } cipherSuiteOk := false