Use empty renegotiate extension instead of SCSV for TLS > 1.0
authorTim Perry <pimterry@gmail.com>
Tue, 16 Apr 2024 13:40:21 +0000 (15:40 +0200)
committerMatt Caswell <matt@openssl.org>
Mon, 22 Apr 2024 12:23:28 +0000 (13:23 +0100)
commit972ee925b16fc3bc7ec71080c439e669754235ab
tree69a9654ce675a2d8e5903f979842488086cd3556
parent6ee369cd6ec751c03879da56178e75e2691e08cb
Use empty renegotiate extension instead of SCSV for TLS > 1.0

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24161)
CHANGES.md
ssl/statem/extensions_clnt.c
ssl/statem/statem_clnt.c
test/recipes/70-test_renegotiation.t
test/recipes/70-test_sslextension.t
test/recipes/70-test_sslmessages.t
test/recipes/70-test_tls13certcomp.t
test/recipes/70-test_tls13kexmodes.t
test/recipes/70-test_tls13messages.t
test/sslapitest.c