summaryrefslogtreecommitdiff
path: root/src/lib/libssl/tls13_internal.h
diff options
context:
space:
mode:
authorjsing <>2020-01-25 09:20:56 +0000
committerjsing <>2020-01-25 09:20:56 +0000
commit6b9adcf89cc2130fb9b26ac8e68e18a16ae477b7 (patch)
treebcc235a6daebd39d649e02f89e58cc75116ad6c0 /src/lib/libssl/tls13_internal.h
parent8ef6d5699390cd817ba24c3f8f8a670d68b744af (diff)
downloadopenbsd-6b9adcf89cc2130fb9b26ac8e68e18a16ae477b7.tar.gz
openbsd-6b9adcf89cc2130fb9b26ac8e68e18a16ae477b7.tar.bz2
openbsd-6b9adcf89cc2130fb9b26ac8e68e18a16ae477b7.zip
It is possible to receive a pre-TLSv1.3 alert in response to a TLSv1.3
client hello. Allow pre-TLSv1.3 alerts (including warnings) to be received before the server hello message. Disallow pre-TLSv1.3 alerts as soon as we know that we are using TLSv1.3. Noticed by ajacoutot@ while connecting to www.openprinting.org. ok tb@
Diffstat (limited to 'src/lib/libssl/tls13_internal.h')
-rw-r--r--src/lib/libssl/tls13_internal.h3
1 files changed, 2 insertions, 1 deletions
diff --git a/src/lib/libssl/tls13_internal.h b/src/lib/libssl/tls13_internal.h
index 4ff2df6e97..9aabc409d8 100644
--- a/src/lib/libssl/tls13_internal.h
+++ b/src/lib/libssl/tls13_internal.h
@@ -1,4 +1,4 @@
1/* $OpenBSD: tls13_internal.h,v 1.53 2020/01/24 08:21:24 jsing Exp $ */ 1/* $OpenBSD: tls13_internal.h,v 1.54 2020/01/25 09:20:56 jsing Exp $ */
2/* 2/*
3 * Copyright (c) 2018 Bob Beck <beck@openbsd.org> 3 * Copyright (c) 2018 Bob Beck <beck@openbsd.org>
4 * Copyright (c) 2018 Theo Buehler <tb@openbsd.org> 4 * Copyright (c) 2018 Theo Buehler <tb@openbsd.org>
@@ -122,6 +122,7 @@ struct tls13_record_layer *tls13_record_layer_new(tls13_read_cb wire_read,
122 tls13_phh_sent_cb phh_sent_cb, void *cb_arg); 122 tls13_phh_sent_cb phh_sent_cb, void *cb_arg);
123void tls13_record_layer_free(struct tls13_record_layer *rl); 123void tls13_record_layer_free(struct tls13_record_layer *rl);
124void tls13_record_layer_allow_ccs(struct tls13_record_layer *rl, int allow); 124void tls13_record_layer_allow_ccs(struct tls13_record_layer *rl, int allow);
125void tls13_record_layer_allow_legacy_alerts(struct tls13_record_layer *rl, int allow);
125void tls13_record_layer_rbuf(struct tls13_record_layer *rl, CBS *cbs); 126void tls13_record_layer_rbuf(struct tls13_record_layer *rl, CBS *cbs);
126void tls13_record_layer_set_aead(struct tls13_record_layer *rl, 127void tls13_record_layer_set_aead(struct tls13_record_layer *rl,
127 const EVP_AEAD *aead); 128 const EVP_AEAD *aead);