Revision d40ec4ab8e7c0ff39bf4f9918fbb9dfdca4c5221 authored by Matt Caswell on 10 November 2015, 15:17:42 UTC, committed by Matt Caswell on 10 November 2015, 19:24:20 UTC
If a DTLS client that does not support secure renegotiation connects to an OpenSSL DTLS server then, by default, renegotiation is disabled. If a server application attempts to initiate a renegotiation then OpenSSL is supposed to prevent this. However due to a discrepancy between the TLS and DTLS code, the server sends a HelloRequest anyway in DTLS. This is not a security concern because the handshake will still fail later in the process when the client responds with a ClientHello. Reviewed-by: Tim Hudson <tjh@openssl.org>
1 parent 15a7164
| File | Mode | Size |
|---|---|---|
| CPStringUtils.cpp | -rw-r--r-- | 51.7 KB |
| CPStringUtils.hpp | -rw-r--r-- | 6.6 KB |
| ErrorHandling.cpp | -rw-r--r-- | 4.7 KB |
| ErrorHandling.hpp | -rw-r--r-- | 3.9 KB |
| GetHTTPS.cpp | -rw-r--r-- | 4.3 KB |
| MacSocket.cpp | -rw-r--r-- | 36.9 KB |
| MacSocket.h | -rw-r--r-- | 3.2 KB |
Computing file changes ...
