Revision f5c7f5dfbaf0d2f7d946d0fe86f08e6bcb36ed0d authored by Matt Caswell on 30 June 2016, 12:17:08 UTC, committed by Matt Caswell on 22 August 2016, 09:53:55 UTC
DTLS can handle out of order record delivery. Additionally since handshake messages can be bigger than will fit into a single packet, the messages can be fragmented across multiple records (as with normal TLS). That means that the messages can arrive mixed up, and we have to reassemble them. We keep a queue of buffered messages that are "from the future", i.e. messages we're not ready to deal with yet but have arrived early. The messages held there may not be full yet - they could be one or more fragments that are still in the process of being reassembled. The code assumes that we will eventually complete the reassembly and when that occurs the complete message is removed from the queue at the point that we need to use it. However, DTLS is also tolerant of packet loss. To get around that DTLS messages can be retransmitted. If we receive a full (non-fragmented) message from the peer after previously having received a fragment of that message, then we ignore the message in the queue and just use the non-fragmented version. At that point the queued message will never get removed. Additionally the peer could send "future" messages that we never get to in order to complete the handshake. Each message has a sequence number (starting from 0). We will accept a message fragment for the current message sequence number, or for any sequence up to 10 into the future. However if the Finished message has a sequence number of 2, anything greater than that in the queue is just left there. So, in those two ways we can end up with "orphaned" data in the queue that will never get removed - except when the connection is closed. At that point all the queues are flushed. An attacker could seek to exploit this by filling up the queues with lots of large messages that are never going to be used in order to attempt a DoS by memory exhaustion. I will assume that we are only concerned with servers here. It does not seem reasonable to be concerned about a memory exhaustion attack on a client. They are unlikely to process enough connections for this to be an issue. A "long" handshake with many messages might be 5 messages long (in the incoming direction), e.g. ClientHello, Certificate, ClientKeyExchange, CertificateVerify, Finished. So this would be message sequence numbers 0 to 4. Additionally we can buffer up to 10 messages in the future. Therefore the maximum number of messages that an attacker could send that could get orphaned would typically be 15. The maximum size that a DTLS message is allowed to be is defined by max_cert_list, which by default is 100k. Therefore the maximum amount of "orphaned" memory per connection is 1500k. Message sequence numbers get reset after the Finished message, so renegotiation will not extend the maximum number of messages that can be orphaned per connection. As noted above, the queues do get cleared when the connection is closed. Therefore in order to mount an effective attack, an attacker would have to open many simultaneous connections. Issue reported by Quan Luo. CVE-2016-2179 Reviewed-by: Richard Levitte <levitte@openssl.org>
1 parent 5dfd038
libssl.num
SSL_get_selected_srtp_profile 1 1_1_0 EXIST::FUNCTION:SRTP
SSL_set_read_ahead 2 1_1_0 EXIST::FUNCTION:
SSL_set_accept_state 3 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_cipher_list 4 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_srp_client_pwd_callback 5 1_1_0 EXIST::FUNCTION:SRP
SSL_copy_session_id 6 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_srp_password 7 1_1_0 EXIST::FUNCTION:SRP
SSL_shutdown 8 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_msg_callback 9 1_1_0 EXIST::FUNCTION:
SSL_SESSION_get0_ticket 11 1_1_0 EXIST::FUNCTION:
SSL_get1_supported_ciphers 12 1_1_0 EXIST::FUNCTION:
SSL_state_string_long 13 1_1_0 EXIST::FUNCTION:
SSL_CTX_get0_certificate 14 1_1_0 EXIST::FUNCTION:
SSL_SESSION_set_ex_data 15 1_1_0 EXIST::FUNCTION:
SSL_get_verify_depth 16 1_1_0 EXIST::FUNCTION:
SSL_get0_dane 17 1_1_0 EXIST::FUNCTION:
SSL_CTX_sess_get_get_cb 18 1_1_0 EXIST::FUNCTION:
SSL_CTX_get_default_passwd_cb_userdata 19 1_1_0 EXIST::FUNCTION:
SSL_set_tmp_dh_callback 20 1_1_0 EXIST::FUNCTION:DH
SSL_CTX_get_verify_depth 21 1_1_0 EXIST::FUNCTION:
SSL_CTX_use_RSAPrivateKey_file 22 1_1_0 EXIST::FUNCTION:RSA
SSL_use_PrivateKey_file 23 1_1_0 EXIST::FUNCTION:
SSL_set_generate_session_id 24 1_1_0 EXIST::FUNCTION:
SSL_get_ex_data_X509_STORE_CTX_idx 25 1_1_0 EXIST::FUNCTION:
SSL_get_quiet_shutdown 26 1_1_0 EXIST::FUNCTION:
SSL_dane_enable 27 1_1_0 EXIST::FUNCTION:
SSL_COMP_add_compression_method 28 1_1_0 EXIST::FUNCTION:
SSL_CTX_use_RSAPrivateKey 29 1_1_0 EXIST::FUNCTION:RSA
SSL_CTX_sess_get_new_cb 30 1_1_0 EXIST::FUNCTION:
d2i_SSL_SESSION 31 1_1_0 EXIST::FUNCTION:
SSL_use_PrivateKey_ASN1 32 1_1_0 EXIST::FUNCTION:
PEM_write_SSL_SESSION 33 1_1_0 EXIST::FUNCTION:STDIO
SSL_CTX_set_session_id_context 34 1_1_0 EXIST::FUNCTION:
SSL_CIPHER_get_cipher_nid 35 1_1_0 EXIST::FUNCTION:
SSL_get_srp_g 36 1_1_0 EXIST::FUNCTION:SRP
SSL_want 37 1_1_0 EXIST::FUNCTION:
SSL_get_cipher_list 38 1_1_0 EXIST::FUNCTION:
SSL_get_verify_result 39 1_1_0 EXIST::FUNCTION:
SSL_renegotiate 40 1_1_0 EXIST::FUNCTION:
SSL_get_privatekey 41 1_1_0 EXIST::FUNCTION:
SSL_peek 42 1_1_0 EXIST::FUNCTION:
SRP_Calc_A_param 43 1_1_0 EXIST::FUNCTION:SRP
SSL_SESSION_get_ticket_lifetime_hint 44 1_1_0 EXIST::FUNCTION:
SSL_SRP_CTX_free 45 1_1_0 EXIST::FUNCTION:SRP
SSL_CTX_set_client_CA_list 46 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_next_proto_select_cb 47 1_1_0 EXIST::FUNCTION:NEXTPROTONEG
BIO_ssl_copy_session_id 48 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_security_callback 49 1_1_0 EXIST::FUNCTION:
SSL_CONF_cmd_value_type 50 1_1_0 EXIST::FUNCTION:
SSL_CTX_remove_session 51 1_1_0 EXIST::FUNCTION:
SSL_SESSION_new 52 1_1_0 EXIST::FUNCTION:
TLSv1_2_server_method 53 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,TLS1_2_METHOD
BIO_new_buffer_ssl_connect 54 1_1_0 EXIST::FUNCTION:
SSL_CTX_set0_security_ex_data 55 1_1_0 EXIST::FUNCTION:
SSL_alert_desc_string 56 1_1_0 EXIST::FUNCTION:
SSL_get0_dane_authority 57 1_1_0 EXIST::FUNCTION:
SSL_set_purpose 58 1_1_0 EXIST::FUNCTION:
SSL_CTX_use_PrivateKey_file 59 1_1_0 EXIST::FUNCTION:
SSL_get_rfd 60 1_1_0 EXIST::FUNCTION:
DTLSv1_listen 61 1_1_0 EXIST::FUNCTION:SOCK
SSL_set_ssl_method 62 1_1_0 EXIST::FUNCTION:
SSL_get0_security_ex_data 63 1_1_0 EXIST::FUNCTION:
SSLv3_client_method 64 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,SSL3_METHOD
SSL_set_security_level 65 1_1_0 EXIST::FUNCTION:
DTLSv1_2_method 66 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,DTLS1_2_METHOD
SSL_get_fd 67 1_1_0 EXIST::FUNCTION:
SSL_get1_session 68 1_1_0 EXIST::FUNCTION:
SSL_use_RSAPrivateKey 69 1_1_0 EXIST::FUNCTION:RSA
SSL_CTX_set_srp_cb_arg 70 1_1_0 EXIST::FUNCTION:SRP
SSL_CTX_add_session 71 1_1_0 EXIST::FUNCTION:
SSL_get_srp_N 72 1_1_0 EXIST::FUNCTION:SRP
SSL_has_matching_session_id 73 1_1_0 EXIST::FUNCTION:
PEM_read_SSL_SESSION 74 1_1_0 EXIST::FUNCTION:STDIO
SSL_get_shared_ciphers 75 1_1_0 EXIST::FUNCTION:
SSL_add1_host 76 1_1_0 EXIST::FUNCTION:
SSL_CONF_cmd_argv 77 1_1_0 EXIST::FUNCTION:
SSL_version 78 1_1_0 EXIST::FUNCTION:
SSL_SESSION_print 79 1_1_0 EXIST::FUNCTION:
SSL_get_client_ciphers 80 1_1_0 EXIST::FUNCTION:
SSL_get_srtp_profiles 81 1_1_0 EXIST::FUNCTION:SRTP
SSL_use_certificate_ASN1 82 1_1_0 EXIST::FUNCTION:
SSL_get_peer_certificate 83 1_1_0 EXIST::FUNCTION:
DTLSv1_2_server_method 84 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,DTLS1_2_METHOD
SSL_set_cert_cb 85 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_cookie_verify_cb 86 1_1_0 EXIST::FUNCTION:
SSL_get_shared_sigalgs 87 1_1_0 EXIST::FUNCTION:
SSL_config 88 1_1_0 EXIST::FUNCTION:
TLSv1_1_client_method 89 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,TLS1_1_METHOD
SSL_CIPHER_standard_name 90 1_1_0 EXIST::FUNCTION:SSL_TRACE
SSL_CTX_get_verify_mode 91 1_1_0 EXIST::FUNCTION:
SSL_get_all_async_fds 92 1_1_0 EXIST::FUNCTION:
SSL_CTX_check_private_key 93 1_1_0 EXIST::FUNCTION:
SSL_set_wfd 94 1_1_0 EXIST::FUNCTION:SOCK
SSL_get_client_CA_list 95 1_1_0 EXIST::FUNCTION:
SSL_CONF_CTX_set_flags 96 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_srp_username_callback 97 1_1_0 EXIST::FUNCTION:SRP
SSL_connect 98 1_1_0 EXIST::FUNCTION:
SSL_get_psk_identity 99 1_1_0 EXIST::FUNCTION:PSK
SSL_CTX_use_certificate_file 100 1_1_0 EXIST::FUNCTION:
SSL_set_session_ticket_ext 101 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_psk_server_callback 102 1_1_0 EXIST::FUNCTION:PSK
SSL_get_sigalgs 103 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_next_protos_advertised_cb 104 1_1_0 EXIST::FUNCTION:NEXTPROTONEG
SSL_CTX_set_trust 105 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_verify 106 1_1_0 EXIST::FUNCTION:
SSL_set_rfd 107 1_1_0 EXIST::FUNCTION:SOCK
SSL_SESSION_set_timeout 108 1_1_0 EXIST::FUNCTION:
SSL_set_psk_client_callback 109 1_1_0 EXIST::FUNCTION:PSK
SSL_get_client_random 110 1_1_0 EXIST::FUNCTION:
TLS_method 111 1_1_0 EXIST::FUNCTION:
SSL_CONF_CTX_clear_flags 112 1_1_0 EXIST::FUNCTION:
TLSv1_client_method 113 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,TLS1_METHOD
SSL_CIPHER_get_bits 114 1_1_0 EXIST::FUNCTION:
SSL_test_functions 115 1_1_0 EXIST::FUNCTION:UNIT_TEST
SSL_get_SSL_CTX 116 1_1_0 EXIST::FUNCTION:
SSL_get_session 117 1_1_0 EXIST::FUNCTION:
SSL_CTX_callback_ctrl 118 1_1_0 EXIST::FUNCTION:
SSL_get_finished 119 1_1_0 EXIST::FUNCTION:
SSL_add_dir_cert_subjects_to_stack 120 1_1_0 EXIST::FUNCTION:
SSL_get_state 121 1_1_0 EXIST::FUNCTION:
SSL_CONF_CTX_finish 122 1_1_0 EXIST::FUNCTION:
SSL_CTX_add_server_custom_ext 123 1_1_0 EXIST::FUNCTION:
SSL_SESSION_get_ex_data 124 1_1_0 EXIST::FUNCTION:
SSL_get_srp_username 125 1_1_0 EXIST::FUNCTION:SRP
SSL_CTX_set_purpose 126 1_1_0 EXIST::FUNCTION:
SSL_clear 127 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_cert_store 128 1_1_0 EXIST::FUNCTION:
TLSv1_2_method 129 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,TLS1_2_METHOD
SSL_session_reused 130 1_1_0 EXIST::FUNCTION:
SSL_free 131 1_1_0 EXIST::FUNCTION:
BIO_ssl_shutdown 132 1_1_0 EXIST::FUNCTION:
SSL_CTX_get_client_CA_list 133 1_1_0 EXIST::FUNCTION:
SSL_CTX_sessions 134 1_1_0 EXIST::FUNCTION:
SSL_get_options 135 1_1_0 EXIST::FUNCTION:
SSL_set_verify_depth 136 1_1_0 EXIST::FUNCTION:
SSL_get_error 137 1_1_0 EXIST::FUNCTION:
SSL_get_servername 138 1_1_0 EXIST::FUNCTION:
SSL_get_version 139 1_1_0 EXIST::FUNCTION:
SSL_state_string 140 1_1_0 EXIST::FUNCTION:
SSL_SESSION_get_timeout 141 1_1_0 EXIST::FUNCTION:
SSL_CTX_sess_get_remove_cb 142 1_1_0 EXIST::FUNCTION:
SSL_get_current_cipher 143 1_1_0 EXIST::FUNCTION:
SSL_up_ref 144 1_1_0 EXIST::FUNCTION:
SSL_export_keying_material 145 1_1_0 EXIST::FUNCTION:
SSL_callback_ctrl 146 1_1_0 EXIST::FUNCTION:
SSL_set_security_callback 147 1_1_0 EXIST::FUNCTION:
SSL_SRP_CTX_init 148 1_1_0 EXIST::FUNCTION:SRP
ERR_load_SSL_strings 149 1_1_0 EXIST::FUNCTION:
SSL_CTX_SRP_CTX_init 150 1_1_0 EXIST::FUNCTION:SRP
SSL_SESSION_set_time 151 1_1_0 EXIST::FUNCTION:
i2d_SSL_SESSION 152 1_1_0 EXIST::FUNCTION:
SSL_SESSION_get_master_key 153 1_1_0 EXIST::FUNCTION:
SSL_COMP_get_compression_methods 154 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_alpn_select_cb 155 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_tmp_dh_callback 156 1_1_0 EXIST::FUNCTION:DH
SSL_CTX_get_default_passwd_cb 157 1_1_0 EXIST::FUNCTION:
TLSv1_server_method 158 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,TLS1_METHOD
DTLS_server_method 159 1_1_0 EXIST::FUNCTION:
SSL_set0_rbio 160 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_options 161 1_1_0 EXIST::FUNCTION:
SSL_set_msg_callback 162 1_1_0 EXIST::FUNCTION:
SSL_CONF_CTX_free 163 1_1_0 EXIST::FUNCTION:
SSL_CTX_get_ssl_method 164 1_1_0 EXIST::FUNCTION:
SSL_get_server_random 165 1_1_0 EXIST::FUNCTION:
SSL_set_shutdown 166 1_1_0 EXIST::FUNCTION:
SSL_CTX_add_client_CA 167 1_1_0 EXIST::FUNCTION:
TLSv1_1_server_method 168 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,TLS1_1_METHOD
PEM_write_bio_SSL_SESSION 169 1_1_0 EXIST::FUNCTION:
SSL_write 170 1_1_0 EXIST::FUNCTION:
SSL_set1_host 171 1_1_0 EXIST::FUNCTION:
SSL_use_RSAPrivateKey_file 172 1_1_0 EXIST::FUNCTION:RSA
SSL_CTX_get_info_callback 173 1_1_0 EXIST::FUNCTION:
SSL_get0_peername 174 1_1_0 EXIST::FUNCTION:
SSL_set_srp_server_param 175 1_1_0 EXIST::FUNCTION:SRP
TLS_server_method 176 1_1_0 EXIST::FUNCTION:
SSL_get_psk_identity_hint 177 1_1_0 EXIST::FUNCTION:PSK
SSL_set_session 178 1_1_0 EXIST::FUNCTION:
SSL_get0_param 179 1_1_0 EXIST::FUNCTION:
SSL_set_default_passwd_cb 180 1_1_0 EXIST::FUNCTION:
SSL_get_read_ahead 181 1_1_0 EXIST::FUNCTION:
SSL_dup_CA_list 182 1_1_0 EXIST::FUNCTION:
SSL_get_verify_callback 183 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_default_passwd_cb 184 1_1_0 EXIST::FUNCTION:
SSL_get_servername_type 185 1_1_0 EXIST::FUNCTION:
TLSv1_2_client_method 186 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,TLS1_2_METHOD
SSL_add_client_CA 187 1_1_0 EXIST::FUNCTION:
SSL_CTX_get0_security_ex_data 188 1_1_0 EXIST::FUNCTION:
SSL_get_ex_data 189 1_1_0 EXIST::FUNCTION:
SSL_CTX_flush_sessions 190 1_1_0 EXIST::FUNCTION:
SSL_use_PrivateKey 191 1_1_0 EXIST::FUNCTION:
DTLSv1_client_method 192 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,DTLS1_METHOD
SSL_CTX_dane_mtype_set 193 1_1_0 EXIST::FUNCTION:
SSL_get_wfd 194 1_1_0 EXIST::FUNCTION:
SSL_get_ssl_method 195 1_1_0 EXIST::FUNCTION:
SSL_set_verify_result 196 1_1_0 EXIST::FUNCTION:
SSL_use_RSAPrivateKey_ASN1 197 1_1_0 EXIST::FUNCTION:RSA
SSL_CIPHER_get_name 198 1_1_0 EXIST::FUNCTION:
OPENSSL_init_ssl 199 1_1_0 EXIST::FUNCTION:
SSL_dup 200 1_1_0 EXIST::FUNCTION:
SSL_CTX_use_serverinfo 201 1_1_0 EXIST::FUNCTION:
SSL_CTX_use_serverinfo_file 202 1_1_0 EXIST::FUNCTION:
SSL_set_options 203 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_default_verify_dir 204 1_1_0 EXIST::FUNCTION:
SSL_do_handshake 205 1_1_0 EXIST::FUNCTION:
SSL_CTX_get_ex_data 206 1_1_0 EXIST::FUNCTION:
SSL_is_init_finished 207 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_default_verify_file 208 1_1_0 EXIST::FUNCTION:
SSLv3_method 209 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,SSL3_METHOD
SSL_CTX_set_cookie_generate_cb 210 1_1_0 EXIST::FUNCTION:
SSL_certs_clear 211 1_1_0 EXIST::FUNCTION:
SSL_set_connect_state 212 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_ex_data 213 1_1_0 EXIST::FUNCTION:
SSL_rstate_string 214 1_1_0 EXIST::FUNCTION:
SSL_SESSION_get0_peer 215 1_1_0 EXIST::FUNCTION:
SSL_SESSION_get_compress_id 216 1_1_0 EXIST::FUNCTION:
SSL_get_peer_cert_chain 217 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_cert_cb 218 1_1_0 EXIST::FUNCTION:
PEM_read_bio_SSL_SESSION 219 1_1_0 EXIST::FUNCTION:
SSL_set_info_callback 220 1_1_0 EXIST::FUNCTION:
SSL_CTX_sess_set_new_cb 221 1_1_0 EXIST::FUNCTION:
SSL_CTX_get_security_level 222 1_1_0 EXIST::FUNCTION:
SSL_CTX_ctrl 223 1_1_0 EXIST::FUNCTION:
SSL_set_alpn_protos 224 1_1_0 EXIST::FUNCTION:
SSL_set_ex_data 225 1_1_0 EXIST::FUNCTION:
SSL_rstate_string_long 226 1_1_0 EXIST::FUNCTION:
SSL_ctrl 227 1_1_0 EXIST::FUNCTION:
SSL_get_current_compression 228 1_1_0 EXIST::FUNCTION:
SSL_SESSION_has_ticket 229 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_cert_verify_callback 230 1_1_0 EXIST::FUNCTION:
SSL_set_session_secret_cb 231 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_client_cert_engine 232 1_1_0 EXIST::FUNCTION:ENGINE
SSL_CTX_get0_param 233 1_1_0 EXIST::FUNCTION:
SSL_CTX_set1_param 234 1_1_0 EXIST::FUNCTION:
SSL_get_certificate 235 1_1_0 EXIST::FUNCTION:
DTLSv1_server_method 236 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,DTLS1_METHOD
SSL_set_fd 237 1_1_0 EXIST::FUNCTION:SOCK
SSL_use_certificate 238 1_1_0 EXIST::FUNCTION:
DTLSv1_method 239 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,DTLS1_METHOD
SSL_set0_wbio 240 1_1_0 EXIST::FUNCTION:
SSL_read 241 1_1_0 EXIST::FUNCTION:
SSL_CTX_get_options 242 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_ssl_version 243 1_1_0 EXIST::FUNCTION:
SSL_set_SSL_CTX 244 1_1_0 EXIST::FUNCTION:
SSL_renegotiate_abbreviated 245 1_1_0 EXIST::FUNCTION:
SSL_get_verify_mode 246 1_1_0 EXIST::FUNCTION:
SSL_CIPHER_get_id 247 1_1_0 EXIST::FUNCTION:
SSL_SESSION_print_keylog 248 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_psk_client_callback 249 1_1_0 EXIST::FUNCTION:PSK
SSL_SESSION_get_time 250 1_1_0 EXIST::FUNCTION:
SSL_set_debug 251 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0
SSL_get_security_level 252 1_1_0 EXIST::FUNCTION:
SSL_CIPHER_description 253 1_1_0 EXIST::FUNCTION:
SSL_set_default_passwd_cb_userdata 254 1_1_0 EXIST::FUNCTION:
SSL_get_srp_userinfo 255 1_1_0 EXIST::FUNCTION:SRP
SSL_extension_supported 256 1_1_0 EXIST::FUNCTION:
SSL_dane_tlsa_add 257 1_1_0 EXIST::FUNCTION:
SSL_srp_server_param_with_username 258 1_1_0 EXIST::FUNCTION:SRP
SSL_CIPHER_get_version 259 1_1_0 EXIST::FUNCTION:
SSL_get0_verified_chain 260 1_1_0 EXIST::FUNCTION:
SSL_CIPHER_find 261 1_1_0 EXIST::FUNCTION:
SSL_get_rbio 262 1_1_0 EXIST::FUNCTION:
SSL_CONF_CTX_set_ssl 263 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_verify_depth 264 1_1_0 EXIST::FUNCTION:
SSL_get_ciphers 265 1_1_0 EXIST::FUNCTION:
SSL_CTX_config 266 1_1_0 EXIST::FUNCTION:
SSL_CONF_CTX_set_ssl_ctx 267 1_1_0 EXIST::FUNCTION:
SSL_CONF_cmd 268 1_1_0 EXIST::FUNCTION:
SSL_add_ssl_module 269 1_1_0 EXIST::FUNCTION:
SSL_CTX_get_verify_callback 270 1_1_0 EXIST::FUNCTION:
SSL_set1_param 271 1_1_0 EXIST::FUNCTION:
SSL_use_certificate_file 272 1_1_0 EXIST::FUNCTION:
SSL_get_changed_async_fds 273 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_client_cert_cb 274 1_1_0 EXIST::FUNCTION:
DTLS_client_method 275 1_1_0 EXIST::FUNCTION:
SSL_set_trust 276 1_1_0 EXIST::FUNCTION:
SSL_CTX_get_security_callback 277 1_1_0 EXIST::FUNCTION:
SSL_CTX_clear_options 278 1_1_0 EXIST::FUNCTION:
SSL_check_chain 279 1_1_0 EXIST::FUNCTION:
SSL_CTX_sess_set_remove_cb 280 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_info_callback 281 1_1_0 EXIST::FUNCTION:
SSL_pending 282 1_1_0 EXIST::FUNCTION:
SSL_set_bio 283 1_1_0 EXIST::FUNCTION:
BIO_new_ssl_connect 284 1_1_0 EXIST::FUNCTION:
SSL_waiting_for_async 285 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_srp_strength 286 1_1_0 EXIST::FUNCTION:SRP
SSL_CTX_get_quiet_shutdown 287 1_1_0 EXIST::FUNCTION:
SSL_CTX_use_certificate_chain_file 288 1_1_0 EXIST::FUNCTION:
SSL_CTX_dane_enable 289 1_1_0 EXIST::FUNCTION:
SSL_CONF_CTX_new 290 1_1_0 EXIST::FUNCTION:
SSL_get0_alpn_selected 291 1_1_0 EXIST::FUNCTION:
SSL_get0_next_proto_negotiated 292 1_1_0 EXIST::FUNCTION:NEXTPROTONEG
SSL_set0_security_ex_data 293 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_tlsext_use_srtp 294 1_1_0 EXIST::FUNCTION:SRTP
SSL_COMP_set0_compression_methods 295 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_not_resumable_session_callback 296 1_1_0 EXIST::FUNCTION:
SSL_accept 297 1_1_0 EXIST::FUNCTION:
SSL_use_psk_identity_hint 298 1_1_0 EXIST::FUNCTION:PSK
SSL_trace 299 1_1_0 EXIST::FUNCTION:SSL_TRACE
DTLS_method 300 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_srp_verify_param_callback 301 1_1_0 EXIST::FUNCTION:SRP
SSL_CTX_set_timeout 302 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_security_level 303 1_1_0 EXIST::FUNCTION:
TLS_client_method 304 1_1_0 EXIST::FUNCTION:
SSL_set_quiet_shutdown 305 1_1_0 EXIST::FUNCTION:
SSL_CTX_up_ref 306 1_1_0 EXIST::FUNCTION:
SSL_check_private_key 307 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_quiet_shutdown 308 1_1_0 EXIST::FUNCTION:
SSL_select_next_proto 309 1_1_0 EXIST::FUNCTION:
SSL_load_client_CA_file 310 1_1_0 EXIST::FUNCTION:
SSL_set_srp_server_param_pw 311 1_1_0 EXIST::FUNCTION:SRP
SSL_renegotiate_pending 312 1_1_0 EXIST::FUNCTION:
SSL_CTX_new 313 1_1_0 EXIST::FUNCTION:
SSL_set_session_ticket_ext_cb 314 1_1_0 EXIST::FUNCTION:
SSL_CTX_get_timeout 315 1_1_0 EXIST::FUNCTION:
SSL_use_certificate_chain_file 316 1_1_0 EXIST::FUNCTION:
SSL_set_not_resumable_session_callback 317 1_1_0 EXIST::FUNCTION:
SSL_CTX_SRP_CTX_free 318 1_1_0 EXIST::FUNCTION:SRP
SSL_get_current_expansion 319 1_1_0 EXIST::FUNCTION:
SSL_clear_options 320 1_1_0 EXIST::FUNCTION:
SSL_CTX_use_PrivateKey 321 1_1_0 EXIST::FUNCTION:
SSL_get_info_callback 322 1_1_0 EXIST::FUNCTION:
SSL_CTX_use_psk_identity_hint 323 1_1_0 EXIST::FUNCTION:PSK
SSL_CTX_use_RSAPrivateKey_ASN1 324 1_1_0 EXIST::FUNCTION:RSA
SSL_CTX_use_PrivateKey_ASN1 325 1_1_0 EXIST::FUNCTION:
SSL_CTX_get0_privatekey 326 1_1_0 EXIST::FUNCTION:
BIO_f_ssl 327 1_1_0 EXIST::FUNCTION:
SSLv3_server_method 328 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,SSL3_METHOD
SSL_SESSION_free 329 1_1_0 EXIST::FUNCTION:
SSL_get_shutdown 330 1_1_0 EXIST::FUNCTION:
SSL_get_peer_finished 331 1_1_0 EXIST::FUNCTION:
SSL_set_tlsext_use_srtp 332 1_1_0 EXIST::FUNCTION:SRTP
TLSv1_method 333 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,TLS1_METHOD
SSL_set_psk_server_callback 334 1_1_0 EXIST::FUNCTION:PSK
SSL_CTX_set_alpn_protos 335 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_default_verify_paths 336 1_1_0 EXIST::FUNCTION:
SSL_CTX_sess_set_get_cb 337 1_1_0 EXIST::FUNCTION:
SSL_add_file_cert_subjects_to_stack 338 1_1_0 EXIST::FUNCTION:
SSL_get_default_passwd_cb_userdata 339 1_1_0 EXIST::FUNCTION:
SSL_get_security_callback 340 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_srp_username 341 1_1_0 EXIST::FUNCTION:SRP
SSL_COMP_get_name 342 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_default_passwd_cb_userdata 343 1_1_0 EXIST::FUNCTION:
SSL_set_verify 344 1_1_0 EXIST::FUNCTION:
SSL_in_before 345 1_1_0 EXIST::FUNCTION:
SSL_CIPHER_get_digest_nid 346 1_1_0 EXIST::FUNCTION:
SSL_CTX_add_client_custom_ext 347 1_1_0 EXIST::FUNCTION:
SSL_CTX_use_certificate 348 1_1_0 EXIST::FUNCTION:
SSL_set_cipher_list 349 1_1_0 EXIST::FUNCTION:
SSL_get_wbio 350 1_1_0 EXIST::FUNCTION:
SSL_set_hostflags 351 1_1_0 EXIST::FUNCTION:
SSL_alert_desc_string_long 352 1_1_0 EXIST::FUNCTION:
SSL_get_default_timeout 353 1_1_0 EXIST::FUNCTION:
SSL_set_session_id_context 354 1_1_0 EXIST::FUNCTION:
SSL_new 355 1_1_0 EXIST::FUNCTION:
TLSv1_1_method 356 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,TLS1_1_METHOD
SSL_CTX_get_cert_store 357 1_1_0 EXIST::FUNCTION:
SSL_CTX_load_verify_locations 358 1_1_0 EXIST::FUNCTION:
SSL_SESSION_print_fp 359 1_1_0 EXIST::FUNCTION:STDIO
SSL_get0_dane_tlsa 360 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_generate_session_id 361 1_1_0 EXIST::FUNCTION:
SSL_alert_type_string_long 362 1_1_0 EXIST::FUNCTION:
SSL_CONF_CTX_set1_prefix 363 1_1_0 EXIST::FUNCTION:
SSL_in_init 364 1_1_0 EXIST::FUNCTION:
BIO_new_ssl 365 1_1_0 EXIST::FUNCTION:
SSL_CTX_get_client_cert_cb 366 1_1_0 EXIST::FUNCTION:
SSL_CTX_use_certificate_ASN1 367 1_1_0 EXIST::FUNCTION:
SSL_set_client_CA_list 368 1_1_0 EXIST::FUNCTION:
SSL_CTX_free 369 1_1_0 EXIST::FUNCTION:
SSL_get_default_passwd_cb 370 1_1_0 EXIST::FUNCTION:
SSL_SESSION_get_id 371 1_1_0 EXIST::FUNCTION:
SSL_SESSION_set1_id_context 372 1_1_0 EXIST::FUNCTION:
SSL_is_server 373 1_1_0 EXIST::FUNCTION:
SSL_alert_type_string 374 1_1_0 EXIST::FUNCTION:
DTLSv1_2_client_method 375 1_1_0 EXIST::FUNCTION:DEPRECATEDIN_1_1_0,DTLS1_2_METHOD
SSL_CTX_set_ctlog_list_file 376 1_1_0 EXIST::FUNCTION:CT
SSL_set_ct_validation_callback 377 1_1_0 EXIST::FUNCTION:CT
SSL_CTX_set_default_ctlog_list_file 378 1_1_0 EXIST::FUNCTION:CT
SSL_CTX_has_client_custom_ext 379 1_1_0 EXIST::FUNCTION:
SSL_ct_is_enabled 380 1_1_0 EXIST::FUNCTION:CT
SSL_get0_peer_scts 381 1_1_0 EXIST::FUNCTION:CT
SSL_CTX_set_ct_validation_callback 382 1_1_0 EXIST::FUNCTION:CT
SSL_CTX_ct_is_enabled 383 1_1_0 EXIST::FUNCTION:CT
SSL_set_default_read_buffer_len 384 1_1_0 EXIST::FUNCTION:
SSL_CTX_set_default_read_buffer_len 385 1_1_0 EXIST::FUNCTION:
SSL_has_pending 386 1_1_0 EXIST::FUNCTION:
SSL_CIPHER_get_auth_nid 387 1_1_0 EXIST::FUNCTION:
SSL_CIPHER_get_kx_nid 388 1_1_0 EXIST::FUNCTION:
SSL_CIPHER_is_aead 389 1_1_0 EXIST::FUNCTION:
SSL_SESSION_up_ref 390 1_1_0 EXIST::FUNCTION:
SSL_CTX_set0_ctlog_store 391 1_1_0 EXIST::FUNCTION:CT
SSL_CTX_get0_ctlog_store 392 1_1_0 EXIST::FUNCTION:CT
SSL_enable_ct 393 1_1_0 EXIST::FUNCTION:CT
SSL_CTX_enable_ct 394 1_1_0 EXIST::FUNCTION:CT
SSL_CTX_get_ciphers 395 1_1_0 EXIST::FUNCTION:
SSL_SESSION_get0_hostname 396 1_1_0 EXIST::FUNCTION:
SSL_client_version 397 1_1_0 EXIST::FUNCTION:
SSL_SESSION_get_protocol_version 398 1_1_0 EXIST::FUNCTION:
SSL_is_dtls 399 1_1_0 EXIST::FUNCTION:
SSL_CTX_dane_set_flags 400 1_1_0 EXIST::FUNCTION:
SSL_dane_set_flags 401 1_1_0 EXIST::FUNCTION:
SSL_CTX_dane_clear_flags 402 1_1_0 EXIST::FUNCTION:
SSL_dane_clear_flags 403 1_1_0 EXIST::FUNCTION:
SSL_SESSION_get0_cipher 404 1_1_0 EXIST::FUNCTION:
SSL_SESSION_get0_id_context 405 1_1_0 EXIST::FUNCTION:
SSL_SESSION_set1_id 406 1_1_0 EXIST::FUNCTION:
Computing file changes ...
