diff options
| author | tb <> | 2024-05-22 14:02:08 +0000 |
|---|---|---|
| committer | tb <> | 2024-05-22 14:02:08 +0000 |
| commit | bdfe60b31e70aaf6fe4dee70a0e08e1b14d96233 (patch) | |
| tree | e097609e2839e2669ef6dccf478b997c6ee97d1c /src/lib/libssl/bs_cbs.c | |
| parent | 41841ccdac91b92627c36d5995f4a285757d3773 (diff) | |
| download | openbsd-bdfe60b31e70aaf6fe4dee70a0e08e1b14d96233.tar.gz openbsd-bdfe60b31e70aaf6fe4dee70a0e08e1b14d96233.tar.bz2 openbsd-bdfe60b31e70aaf6fe4dee70a0e08e1b14d96233.zip | |
Fix in-place decryption for EVP_chacha20_poly1305()
Take the MAC before clobbering the input value on decryption. Fixes hangs
during the QUIC handshake with HAProxy using TLS_CHACHA20_POLY1305_SHA256.
Found, issue pinpointed, and initial fix tested by Lucas Gabriel Vuotto:
Let me take this opportunity to thank the HAProxy team for going out of
their way to keep supporting LibreSSL. It's much appreciated.
See https://github.com/haproxy/haproxy/issues/2569
tweak/ok jsing
Diffstat (limited to 'src/lib/libssl/bs_cbs.c')
0 files changed, 0 insertions, 0 deletions