From a83bffd9426baf033b57ea01261b712a3e5480df Mon Sep 17 00:00:00 2001
From: Robert Tupelo-Schneck <schneck@cnri.reston.va.us>
Date: Fri, 30 Oct 2020 12:34:31 -0400
Subject: [PATCH] Allow RFC6062 TCP relay data to look like TLS; fixes #605

---
 src/apps/relay/ns_ioalib_engine_impl.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/apps/relay/ns_ioalib_engine_impl.c b/src/apps/relay/ns_ioalib_engine_impl.c
index ba1e387f..de31bf42 100644
--- a/src/apps/relay/ns_ioalib_engine_impl.c
+++ b/src/apps/relay/ns_ioalib_engine_impl.c
@@ -3374,7 +3374,7 @@ int register_callback_on_ioa_socket(ioa_engine_handle e, ioa_socket_handle s, in
 						}
 					} else {
 #if TLS_SUPPORTED
-						if(check_tentative_tls(s->fd)) {
+						if((s->sat != TCP_CLIENT_DATA_SOCKET) && (s->sat != TCP_RELAY_DATA_SOCKET) && check_tentative_tls(s->fd)) {
 							s->tobeclosed = 1;
 							return -1;
 						}