artulab
projects / openbsd / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 52999e1) | patch
Be stricter with middlebox compatibility mode in the TLSv1.3 server.
authorjsing <jsing@openbsd.org>
Sun, 11 Sep 2022 14:39:44 +0000 (14:39 +0000)
committerjsing <jsing@openbsd.org>
Sun, 11 Sep 2022 14:39:44 +0000 (14:39 +0000)
commita096b0fa016e051e63061a1cc52f97565ca27a61
treebdcc24c6192d681893271fba02bde7ac416b7d40tree | snapshot
parent52999e1f7e30b54f4a2484ac63d95db925c9b889commit | diff
Be stricter with middlebox compatibility mode in the TLSv1.3 server.

Only allow a TLSv1.3 client to request middlebox compatibility mode if
this is permitted. Ensure that the legacy session identifier is either
zero length or 32 bytes in length. Additionally, only allow CCS messages
on the server side if the client actually requested middlebox compatibility
mode.

ok tb@
lib/libssl/tls13_server.c diff | blob | history
OpenBSD src
by Ahmet Artu Yildirim