diff options
author | jsing <> | 2020-01-25 09:20:56 +0000 |
---|---|---|
committer | jsing <> | 2020-01-25 09:20:56 +0000 |
commit | 6b9adcf89cc2130fb9b26ac8e68e18a16ae477b7 (patch) | |
tree | bcc235a6daebd39d649e02f89e58cc75116ad6c0 /src/lib/libssl/tls13_internal.h | |
parent | 8ef6d5699390cd817ba24c3f8f8a670d68b744af (diff) | |
download | openbsd-6b9adcf89cc2130fb9b26ac8e68e18a16ae477b7.tar.gz openbsd-6b9adcf89cc2130fb9b26ac8e68e18a16ae477b7.tar.bz2 openbsd-6b9adcf89cc2130fb9b26ac8e68e18a16ae477b7.zip |
It is possible to receive a pre-TLSv1.3 alert in response to a TLSv1.3
client hello.
Allow pre-TLSv1.3 alerts (including warnings) to be received before the
server hello message. Disallow pre-TLSv1.3 alerts as soon as we know that
we are using TLSv1.3.
Noticed by ajacoutot@ while connecting to www.openprinting.org.
ok tb@
Diffstat (limited to 'src/lib/libssl/tls13_internal.h')
-rw-r--r-- | src/lib/libssl/tls13_internal.h | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/lib/libssl/tls13_internal.h b/src/lib/libssl/tls13_internal.h index 4ff2df6e97..9aabc409d8 100644 --- a/src/lib/libssl/tls13_internal.h +++ b/src/lib/libssl/tls13_internal.h | |||
@@ -1,4 +1,4 @@ | |||
1 | /* $OpenBSD: tls13_internal.h,v 1.53 2020/01/24 08:21:24 jsing Exp $ */ | 1 | /* $OpenBSD: tls13_internal.h,v 1.54 2020/01/25 09:20:56 jsing Exp $ */ |
2 | /* | 2 | /* |
3 | * Copyright (c) 2018 Bob Beck <beck@openbsd.org> | 3 | * Copyright (c) 2018 Bob Beck <beck@openbsd.org> |
4 | * Copyright (c) 2018 Theo Buehler <tb@openbsd.org> | 4 | * Copyright (c) 2018 Theo Buehler <tb@openbsd.org> |
@@ -122,6 +122,7 @@ struct tls13_record_layer *tls13_record_layer_new(tls13_read_cb wire_read, | |||
122 | tls13_phh_sent_cb phh_sent_cb, void *cb_arg); | 122 | tls13_phh_sent_cb phh_sent_cb, void *cb_arg); |
123 | void tls13_record_layer_free(struct tls13_record_layer *rl); | 123 | void tls13_record_layer_free(struct tls13_record_layer *rl); |
124 | void tls13_record_layer_allow_ccs(struct tls13_record_layer *rl, int allow); | 124 | void tls13_record_layer_allow_ccs(struct tls13_record_layer *rl, int allow); |
125 | void tls13_record_layer_allow_legacy_alerts(struct tls13_record_layer *rl, int allow); | ||
125 | void tls13_record_layer_rbuf(struct tls13_record_layer *rl, CBS *cbs); | 126 | void tls13_record_layer_rbuf(struct tls13_record_layer *rl, CBS *cbs); |
126 | void tls13_record_layer_set_aead(struct tls13_record_layer *rl, | 127 | void tls13_record_layer_set_aead(struct tls13_record_layer *rl, |
127 | const EVP_AEAD *aead); | 128 | const EVP_AEAD *aead); |