Revision f7fe3d235abf201343c20a59f9d9c8957acc62ff authored by Dr. Stephen Henson on 23 October 2014, 19:36:17 UTC, committed by Matt Caswell on 08 January 2015, 14:14:56 UTC
Fix to prevent use of DH client certificates without sending certificate verify message. If we've used a client certificate to generate the premaster secret ssl3_get_client_key_exchange returns 2 and ssl3_get_cert_verify is never called. We can only skip the certificate verify message in ssl3_get_cert_verify if the client didn't send a certificate. Thanks to Karthikeyan Bhargavan for reporting this issue. CVE-2015-0205 Reviewed-by: Matt Caswell <matt@openssl.org>
1 parent b2688c9
| File | Mode | Size |
|---|---|---|
| ccgost | ||
| vendor_defns | ||
| .cvsignore | -rw-r--r-- | 50 bytes |
| Makefile | -rw-r--r-- | 14.8 KB |
| alpha.opt | -rw-r--r-- | 56 bytes |
| axp.opt | -rw-r--r-- | 56 bytes |
| capierr.bat | -rw-r--r-- | 78 bytes |
| e_4758cca.c | -rw-r--r-- | 25.1 KB |
| e_4758cca.ec | -rw-r--r-- | 43 bytes |
| e_4758cca_err.c | -rw-r--r-- | 5.5 KB |
| e_4758cca_err.h | -rw-r--r-- | 3.9 KB |
| e_aep.c | -rw-r--r-- | 28.0 KB |
| e_aep.ec | -rw-r--r-- | 35 bytes |
| e_aep_err.c | -rw-r--r-- | 5.8 KB |
| e_aep_err.h | -rw-r--r-- | 4.2 KB |
| e_atalla.c | -rw-r--r-- | 17.8 KB |
| e_atalla.ec | -rw-r--r-- | 41 bytes |
| e_atalla_err.c | -rw-r--r-- | 5.1 KB |
| e_atalla_err.h | -rw-r--r-- | 3.7 KB |
| e_capi.c | -rw-r--r-- | 43.6 KB |
| e_capi.ec | -rw-r--r-- | 42 bytes |
| e_capi_err.c | -rw-r--r-- | 7.3 KB |
| e_capi_err.h | -rw-r--r-- | 5.2 KB |
| e_chil.c | -rw-r--r-- | 37.0 KB |
| e_chil.ec | -rw-r--r-- | 37 bytes |
| e_chil_err.c | -rw-r--r-- | 5.8 KB |
| e_chil_err.h | -rw-r--r-- | 4.1 KB |
| e_cswift.c | -rw-r--r-- | 30.7 KB |
| e_cswift.ec | -rw-r--r-- | 41 bytes |
| e_cswift_err.c | -rw-r--r-- | 5.4 KB |
| e_cswift_err.h | -rw-r--r-- | 3.9 KB |
| e_gmp.c | -rw-r--r-- | 12.9 KB |
| e_gmp.ec | -rw-r--r-- | 33 bytes |
| e_gmp_err.c | -rw-r--r-- | 4.5 KB |
| e_gmp_err.h | -rw-r--r-- | 3.4 KB |
| e_nuron.c | -rw-r--r-- | 11.3 KB |
| e_nuron.ec | -rw-r--r-- | 39 bytes |
| e_nuron_err.c | -rw-r--r-- | 4.9 KB |
| e_nuron_err.h | -rw-r--r-- | 3.6 KB |
| e_padlock.c | -rw-r--r-- | 31.7 KB |
| e_padlock.ec | -rw-r--r-- | 44 bytes |
| e_sureware.c | -rw-r--r-- | 30.5 KB |
| e_sureware.ec | -rw-r--r-- | 46 bytes |
| e_sureware_err.c | -rw-r--r-- | 5.9 KB |
| e_sureware_err.h | -rw-r--r-- | 4.2 KB |
| e_ubsec.c | -rw-r--r-- | 30.4 KB |
| e_ubsec.ec | -rw-r--r-- | 39 bytes |
| e_ubsec_err.c | -rw-r--r-- | 5.5 KB |
| e_ubsec_err.h | -rw-r--r-- | 4.0 KB |
| engine_vector.mar | -rw-r--r-- | 532 bytes |
| ia64.opt | -rw-r--r-- | 56 bytes |
| makeengines.com | -rw-r--r-- | 26.2 KB |
| vax.opt | -rw-r--r-- | 189 bytes |
Computing file changes ...
