diff options
Diffstat (limited to 'src/lib/libssl/ssl_clnt.c')
-rw-r--r-- | src/lib/libssl/ssl_clnt.c | 24 |
1 files changed, 11 insertions, 13 deletions
diff --git a/src/lib/libssl/ssl_clnt.c b/src/lib/libssl/ssl_clnt.c index 90aa80f522..22e02735c8 100644 --- a/src/lib/libssl/ssl_clnt.c +++ b/src/lib/libssl/ssl_clnt.c | |||
@@ -1,4 +1,4 @@ | |||
1 | /* $OpenBSD: ssl_clnt.c,v 1.61 2019/03/31 15:49:03 jsing Exp $ */ | 1 | /* $OpenBSD: ssl_clnt.c,v 1.62 2020/01/23 10:48:37 jsing Exp $ */ |
2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) |
3 | * All rights reserved. | 3 | * All rights reserved. |
4 | * | 4 | * |
@@ -811,7 +811,7 @@ ssl3_get_server_hello(SSL *s) | |||
811 | long n; | 811 | long n; |
812 | 812 | ||
813 | s->internal->first_packet = 1; | 813 | s->internal->first_packet = 1; |
814 | n = s->method->internal->ssl_get_message(s, SSL3_ST_CR_SRVR_HELLO_A, | 814 | n = ssl3_get_message(s, SSL3_ST_CR_SRVR_HELLO_A, |
815 | SSL3_ST_CR_SRVR_HELLO_B, -1, 20000, /* ?? */ &ok); | 815 | SSL3_ST_CR_SRVR_HELLO_B, -1, 20000, /* ?? */ &ok); |
816 | if (!ok) | 816 | if (!ok) |
817 | return ((int)n); | 817 | return ((int)n); |
@@ -1048,9 +1048,8 @@ ssl3_get_server_certificate(SSL *s) | |||
1048 | SESS_CERT *sc; | 1048 | SESS_CERT *sc; |
1049 | EVP_PKEY *pkey = NULL; | 1049 | EVP_PKEY *pkey = NULL; |
1050 | 1050 | ||
1051 | n = s->method->internal->ssl_get_message(s, SSL3_ST_CR_CERT_A, | 1051 | n = ssl3_get_message(s, SSL3_ST_CR_CERT_A, |
1052 | SSL3_ST_CR_CERT_B, -1, s->internal->max_cert_list, &ok); | 1052 | SSL3_ST_CR_CERT_B, -1, s->internal->max_cert_list, &ok); |
1053 | |||
1054 | if (!ok) | 1053 | if (!ok) |
1055 | return ((int)n); | 1054 | return ((int)n); |
1056 | 1055 | ||
@@ -1443,7 +1442,7 @@ ssl3_get_server_key_exchange(SSL *s) | |||
1443 | * Use same message size as in ssl3_get_certificate_request() | 1442 | * Use same message size as in ssl3_get_certificate_request() |
1444 | * as ServerKeyExchange message may be skipped. | 1443 | * as ServerKeyExchange message may be skipped. |
1445 | */ | 1444 | */ |
1446 | n = s->method->internal->ssl_get_message(s, SSL3_ST_CR_KEY_EXCH_A, | 1445 | n = ssl3_get_message(s, SSL3_ST_CR_KEY_EXCH_A, |
1447 | SSL3_ST_CR_KEY_EXCH_B, -1, s->internal->max_cert_list, &ok); | 1446 | SSL3_ST_CR_KEY_EXCH_B, -1, s->internal->max_cert_list, &ok); |
1448 | if (!ok) | 1447 | if (!ok) |
1449 | return ((int)n); | 1448 | return ((int)n); |
@@ -1611,9 +1610,8 @@ ssl3_get_certificate_request(SSL *s) | |||
1611 | const unsigned char *q; | 1610 | const unsigned char *q; |
1612 | STACK_OF(X509_NAME) *ca_sk = NULL; | 1611 | STACK_OF(X509_NAME) *ca_sk = NULL; |
1613 | 1612 | ||
1614 | n = s->method->internal->ssl_get_message(s, SSL3_ST_CR_CERT_REQ_A, | 1613 | n = ssl3_get_message(s, SSL3_ST_CR_CERT_REQ_A, |
1615 | SSL3_ST_CR_CERT_REQ_B, -1, s->internal->max_cert_list, &ok); | 1614 | SSL3_ST_CR_CERT_REQ_B, -1, s->internal->max_cert_list, &ok); |
1616 | |||
1617 | if (!ok) | 1615 | if (!ok) |
1618 | return ((int)n); | 1616 | return ((int)n); |
1619 | 1617 | ||
@@ -1765,7 +1763,7 @@ ssl3_get_new_session_ticket(SSL *s) | |||
1765 | long n; | 1763 | long n; |
1766 | CBS cbs, session_ticket; | 1764 | CBS cbs, session_ticket; |
1767 | 1765 | ||
1768 | n = s->method->internal->ssl_get_message(s, SSL3_ST_CR_SESSION_TICKET_A, | 1766 | n = ssl3_get_message(s, SSL3_ST_CR_SESSION_TICKET_A, |
1769 | SSL3_ST_CR_SESSION_TICKET_B, -1, 16384, &ok); | 1767 | SSL3_ST_CR_SESSION_TICKET_B, -1, 16384, &ok); |
1770 | if (!ok) | 1768 | if (!ok) |
1771 | return ((int)n); | 1769 | return ((int)n); |
@@ -1841,10 +1839,9 @@ ssl3_get_cert_status(SSL *s) | |||
1841 | long n; | 1839 | long n; |
1842 | uint8_t status_type; | 1840 | uint8_t status_type; |
1843 | 1841 | ||
1844 | n = s->method->internal->ssl_get_message(s, SSL3_ST_CR_CERT_STATUS_A, | 1842 | n = ssl3_get_message(s, SSL3_ST_CR_CERT_STATUS_A, |
1845 | SSL3_ST_CR_CERT_STATUS_B, SSL3_MT_CERTIFICATE_STATUS, | 1843 | SSL3_ST_CR_CERT_STATUS_B, SSL3_MT_CERTIFICATE_STATUS, |
1846 | 16384, &ok); | 1844 | 16384, &ok); |
1847 | |||
1848 | if (!ok) | 1845 | if (!ok) |
1849 | return ((int)n); | 1846 | return ((int)n); |
1850 | 1847 | ||
@@ -1913,12 +1910,12 @@ ssl3_get_server_done(SSL *s) | |||
1913 | int ok, ret = 0; | 1910 | int ok, ret = 0; |
1914 | long n; | 1911 | long n; |
1915 | 1912 | ||
1916 | n = s->method->internal->ssl_get_message(s, SSL3_ST_CR_SRVR_DONE_A, | 1913 | n = ssl3_get_message(s, SSL3_ST_CR_SRVR_DONE_A, |
1917 | SSL3_ST_CR_SRVR_DONE_B, SSL3_MT_SERVER_DONE, | 1914 | SSL3_ST_CR_SRVR_DONE_B, SSL3_MT_SERVER_DONE, |
1918 | 30, /* should be very small, like 0 :-) */ &ok); | 1915 | 30, /* should be very small, like 0 :-) */ &ok); |
1919 | |||
1920 | if (!ok) | 1916 | if (!ok) |
1921 | return ((int)n); | 1917 | return ((int)n); |
1918 | |||
1922 | if (n > 0) { | 1919 | if (n > 0) { |
1923 | /* should contain no data */ | 1920 | /* should contain no data */ |
1924 | ssl3_send_alert(s, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR); | 1921 | ssl3_send_alert(s, SSL3_AL_FATAL, SSL_AD_DECODE_ERROR); |
@@ -2796,10 +2793,11 @@ ssl3_check_finished(SSL *s) | |||
2796 | return (1); | 2793 | return (1); |
2797 | /* this function is called when we really expect a Certificate | 2794 | /* this function is called when we really expect a Certificate |
2798 | * message, so permit appropriate message length */ | 2795 | * message, so permit appropriate message length */ |
2799 | n = s->method->internal->ssl_get_message(s, SSL3_ST_CR_CERT_A, | 2796 | n = ssl3_get_message(s, SSL3_ST_CR_CERT_A, |
2800 | SSL3_ST_CR_CERT_B, -1, s->internal->max_cert_list, &ok); | 2797 | SSL3_ST_CR_CERT_B, -1, s->internal->max_cert_list, &ok); |
2801 | if (!ok) | 2798 | if (!ok) |
2802 | return ((int)n); | 2799 | return ((int)n); |
2800 | |||
2803 | S3I(s)->tmp.reuse_message = 1; | 2801 | S3I(s)->tmp.reuse_message = 1; |
2804 | if ((S3I(s)->tmp.message_type == SSL3_MT_FINISHED) || | 2802 | if ((S3I(s)->tmp.message_type == SSL3_MT_FINISHED) || |
2805 | (S3I(s)->tmp.message_type == SSL3_MT_NEWSESSION_TICKET)) | 2803 | (S3I(s)->tmp.message_type == SSL3_MT_NEWSESSION_TICKET)) |