From 17edec6bc65420c06304d0617237513f95860b92 Mon Sep 17 00:00:00 2001
From: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date: Wed, 4 Mar 2015 10:25:26 +0100
Subject: [PATCH] disable DTLS if there is no ciphersuite in common

---
 src/worker-vpn.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/worker-vpn.c b/src/worker-vpn.c
index a01d690e..aded54fd 100644
--- a/src/worker-vpn.c
+++ b/src/worker-vpn.c
@@ -1325,7 +1325,7 @@ static int connect_handler(worker_st * ws)
 	}
 
 	ws->udp_state = UP_DISABLED;
-	if (ws->perm_config->udp_port != 0 && req->master_secret_set != 0) {
+	if (ws->perm_config->udp_port != 0 && req->master_secret_set != 0 && ws->req.selected_ciphersuite != NULL) {
 		memcpy(ws->master_secret, req->master_secret, TLS_MASTER_SIZE);
 		ws->udp_state = UP_WAIT_FD;
 	} else {