diff options
-rw-r--r-- | src/lib/libssl/ssl_locl.h | 8 | ||||
-rw-r--r-- | src/lib/libssl/ssl_tlsext.c | 3 | ||||
-rw-r--r-- | src/lib/libssl/t1_lib.c | 6 |
3 files changed, 3 insertions, 14 deletions
diff --git a/src/lib/libssl/ssl_locl.h b/src/lib/libssl/ssl_locl.h index 736005b5c9..046c4bba52 100644 --- a/src/lib/libssl/ssl_locl.h +++ b/src/lib/libssl/ssl_locl.h | |||
@@ -1,4 +1,4 @@ | |||
1 | /* $OpenBSD: ssl_locl.h,v 1.275 2020/05/19 16:35:20 jsing Exp $ */ | 1 | /* $OpenBSD: ssl_locl.h,v 1.276 2020/05/29 17:39:42 jsing Exp $ */ |
2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) |
3 | * All rights reserved. | 3 | * All rights reserved. |
4 | * | 4 | * |
@@ -738,12 +738,6 @@ typedef struct ssl_internal_st { | |||
738 | long max_cert_list; | 738 | long max_cert_list; |
739 | int first_packet; | 739 | int first_packet; |
740 | 740 | ||
741 | int servername_done; /* no further mod of servername | ||
742 | 0 : call the servername extension callback. | ||
743 | 1 : prepare 2, allow last ack just after in server callback. | ||
744 | 2 : don't call servername callback, no ack in server hello | ||
745 | */ | ||
746 | |||
747 | /* Expect OCSP CertificateStatus message */ | 741 | /* Expect OCSP CertificateStatus message */ |
748 | int tlsext_status_expected; | 742 | int tlsext_status_expected; |
749 | /* OCSP status request only */ | 743 | /* OCSP status request only */ |
diff --git a/src/lib/libssl/ssl_tlsext.c b/src/lib/libssl/ssl_tlsext.c index e6e0e7a92d..cf54fc4d2c 100644 --- a/src/lib/libssl/ssl_tlsext.c +++ b/src/lib/libssl/ssl_tlsext.c | |||
@@ -1,4 +1,4 @@ | |||
1 | /* $OpenBSD: ssl_tlsext.c,v 1.73 2020/05/24 15:13:22 tb Exp $ */ | 1 | /* $OpenBSD: ssl_tlsext.c,v 1.74 2020/05/29 17:39:42 jsing Exp $ */ |
2 | /* | 2 | /* |
3 | * Copyright (c) 2016, 2017, 2019 Joel Sing <jsing@openbsd.org> | 3 | * Copyright (c) 2016, 2017, 2019 Joel Sing <jsing@openbsd.org> |
4 | * Copyright (c) 2017 Doug Hogan <doug@openbsd.org> | 4 | * Copyright (c) 2017 Doug Hogan <doug@openbsd.org> |
@@ -2133,7 +2133,6 @@ tlsext_parse(SSL *s, CBS *cbs, int *alert, int is_server, uint16_t msg_type) | |||
2133 | static void | 2133 | static void |
2134 | tlsext_server_reset_state(SSL *s) | 2134 | tlsext_server_reset_state(SSL *s) |
2135 | { | 2135 | { |
2136 | s->internal->servername_done = 0; | ||
2137 | s->tlsext_status_type = -1; | 2136 | s->tlsext_status_type = -1; |
2138 | S3I(s)->renegotiate_seen = 0; | 2137 | S3I(s)->renegotiate_seen = 0; |
2139 | free(S3I(s)->alpn_selected); | 2138 | free(S3I(s)->alpn_selected); |
diff --git a/src/lib/libssl/t1_lib.c b/src/lib/libssl/t1_lib.c index fc828541cd..580ae4b19b 100644 --- a/src/lib/libssl/t1_lib.c +++ b/src/lib/libssl/t1_lib.c | |||
@@ -1,4 +1,4 @@ | |||
1 | /* $OpenBSD: t1_lib.c,v 1.166 2020/05/10 14:17:48 jsing Exp $ */ | 1 | /* $OpenBSD: t1_lib.c,v 1.167 2020/05/29 17:39:42 jsing Exp $ */ |
2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) |
3 | * All rights reserved. | 3 | * All rights reserved. |
4 | * | 4 | * |
@@ -629,7 +629,6 @@ ssl_check_clienthello_tlsext_early(SSL *s) | |||
629 | ssl3_send_alert(s, SSL3_AL_WARNING, al); | 629 | ssl3_send_alert(s, SSL3_AL_WARNING, al); |
630 | return 1; | 630 | return 1; |
631 | case SSL_TLSEXT_ERR_NOACK: | 631 | case SSL_TLSEXT_ERR_NOACK: |
632 | s->internal->servername_done = 0; | ||
633 | default: | 632 | default: |
634 | return 1; | 633 | return 1; |
635 | } | 634 | } |
@@ -737,14 +736,11 @@ ssl_check_serverhello_tlsext(SSL *s) | |||
737 | switch (ret) { | 736 | switch (ret) { |
738 | case SSL_TLSEXT_ERR_ALERT_FATAL: | 737 | case SSL_TLSEXT_ERR_ALERT_FATAL: |
739 | ssl3_send_alert(s, SSL3_AL_FATAL, al); | 738 | ssl3_send_alert(s, SSL3_AL_FATAL, al); |
740 | |||
741 | return -1; | 739 | return -1; |
742 | case SSL_TLSEXT_ERR_ALERT_WARNING: | 740 | case SSL_TLSEXT_ERR_ALERT_WARNING: |
743 | ssl3_send_alert(s, SSL3_AL_WARNING, al); | 741 | ssl3_send_alert(s, SSL3_AL_WARNING, al); |
744 | |||
745 | return 1; | 742 | return 1; |
746 | case SSL_TLSEXT_ERR_NOACK: | 743 | case SSL_TLSEXT_ERR_NOACK: |
747 | s->internal->servername_done = 0; | ||
748 | default: | 744 | default: |
749 | return 1; | 745 | return 1; |
750 | } | 746 | } |