j3d1/bearssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Added support for TLS_FALLBACK_SCSV.

Browse source
This commit is contained in:
Thomas Pornin 2016-11-20 16:14:48 +01:00
parent 6cc90dad21
commit 7561e7d6c8
8 changed files with 457 additions and 412 deletions
Download patch file Download diff file Expand all files Collapse all files

6
tools/server.c
View file

@ -333,6 +333,9 @@ sp_choose(const br_ssl_server_policy_class **pctx,
case BR_SSLKEYX_ECDHE_RSA:
if (pc->sk->key_type == BR_KEYTYPE_RSA) {
choices->cipher_suite = st[u][0];
if (cc->eng.session.version < BR_TLS12) {
hash_id = 0;
}
choices->hash_id = hash_id;
goto choose_ok;
}
@ -340,6 +343,9 @@ sp_choose(const br_ssl_server_policy_class **pctx,
case BR_SSLKEYX_ECDHE_ECDSA:
if (pc->sk->key_type == BR_KEYTYPE_EC) {
choices->cipher_suite = st[u][0];
if (cc->eng.session.version < BR_TLS12) {
hash_id = br_sha1_ID;
}
choices->hash_id = hash_id;
goto choose_ok;
}