artulab
projects / openbsd / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 581451f) | patch
Move the TLSv1.2 record number increment into the new record layer.
authorjsing <jsing@openbsd.org>
Mon, 29 Mar 2021 16:19:15 +0000 (16:19 +0000)
committerjsing <jsing@openbsd.org>
Mon, 29 Mar 2021 16:19:15 +0000 (16:19 +0000)
commite3ae3cd6c9c09e2489c5d8b6149d643e1ead7c07
tree93fe29c68535bafb04cda50156ee44eeeed6427atree | snapshot
parent581451ffca74d4080e6480118a2752b6841ff73ecommit | diff
Move the TLSv1.2 record number increment into the new record layer.

This adds checks (based on the TLSv1.3 implementation) to ensure that the
TLS/DTLS sequence numbers do not wrap, as required by the respective RFCs.

ok inoguchi@ tb@
lib/libssl/ssl_locl.h diff | blob | history
lib/libssl/t1_enc.c diff | blob | history
lib/libssl/tls12_record_layer.c diff | blob | history
OpenBSD src
by Ahmet Artu Yildirim