Revision d40ec4ab8e7c0ff39bf4f9918fbb9dfdca4c5221 authored by Matt Caswell on 10 November 2015, 15:17:42 UTC, committed by Matt Caswell on 10 November 2015, 19:24:20 UTC
If a DTLS client that does not support secure renegotiation connects to an OpenSSL DTLS server then, by default, renegotiation is disabled. If a server application attempts to initiate a renegotiation then OpenSSL is supposed to prevent this. However due to a discrepancy between the TLS and DTLS code, the server sends a HelloRequest anyway in DTLS. This is not a security concern because the handshake will still fail later in the process when the client responds with a ClientHello. Reviewed-by: Tim Hudson <tjh@openssl.org>
1 parent 15a7164
| File | Mode | Size |
|---|---|---|
| build.bat | -rw-r--r-- | 6.5 KB |
| cpy_tests.bat | -rw-r--r-- | 3.2 KB |
| do_tests.pl | -rw-r--r-- | 19.2 KB |
| globals.txt | -rw-r--r-- | 7.4 KB |
| readme.txt | -rw-r--r-- | 668 bytes |
| set_env.bat | -rw-r--r-- | 3.5 KB |
Computing file changes ...
