j3d1/bearssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fixed proper handling of clients with no "secure renegotiation" support.

Browse source
This commit is contained in:
Thomas Pornin 2017-06-18 23:53:17 +02:00
parent 968da0f646
commit 81437e1175
2 changed files with 201 additions and 196 deletions
Download patch file Download diff file Expand all files Collapse all files

5
src/ssl/ssl_hs_server.t0
View file

@ -814,6 +814,11 @@ cc: save-session ( -- ) {
\ we should mark the client as "supporting secure renegotiation".
reneg-scsv if 2 addr-reneg set8 then
\ If, at that point, the 'reneg' value is still 0, then the client
\ did not send the extension or the SCSV, so we have to assume
\ that secure renegotiation is not supported by that client.
addr-reneg get8 ifnot 1 addr-reneg set8 then
\ Check compression.
ok-compression ifnot 40 fail-alert then