diff --git a/ssl/d1_lib.c b/ssl/d1_lib.c index ee78921ba8b0d..144888a00c5d6 100644 --- a/ssl/d1_lib.c +++ b/ssl/d1_lib.c @@ -354,6 +354,10 @@ const SSL_CIPHER *dtls1_get_cipher(unsigned int u) return NULL; } + /* CHACHA20_POLY1305 does not work with DTLS */ + if (ciph->algorithm_enc == SSL_CHACHA20POLY1305) + return NULL; + return ciph; }