diff options
| author | tb <> | 2024-05-22 14:02:08 +0000 |
|---|---|---|
| committer | tb <> | 2024-05-22 14:02:08 +0000 |
| commit | c9e7f6cc4791caccd0623fc02585e3e9b39d6965 (patch) | |
| tree | e097609e2839e2669ef6dccf478b997c6ee97d1c /src/lib/libcrypto/x509/x509_set.c | |
| parent | 2290dbcd032621fa2cada872b167afa988acbc21 (diff) | |
| download | openbsd-c9e7f6cc4791caccd0623fc02585e3e9b39d6965.tar.gz openbsd-c9e7f6cc4791caccd0623fc02585e3e9b39d6965.tar.bz2 openbsd-c9e7f6cc4791caccd0623fc02585e3e9b39d6965.zip | |
Fix in-place decryption for EVP_chacha20_poly1305()
Take the MAC before clobbering the input value on decryption. Fixes hangs
during the QUIC handshake with HAProxy using TLS_CHACHA20_POLY1305_SHA256.
Found, issue pinpointed, and initial fix tested by Lucas Gabriel Vuotto:
Let me take this opportunity to thank the HAProxy team for going out of
their way to keep supporting LibreSSL. It's much appreciated.
See https://github.com/haproxy/haproxy/issues/2569
tweak/ok jsing
Diffstat (limited to 'src/lib/libcrypto/x509/x509_set.c')
0 files changed, 0 insertions, 0 deletions