projects / openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 822d265) | patch
Only call ssl3_init_finished_mac once for DTLS
authorMatt Caswell <matt@openssl.org>
Tue, 3 Nov 2015 15:49:08 +0000 (15:49 +0000)
committerMatt Caswell <matt@openssl.org>
Tue, 10 Nov 2015 18:44:56 +0000 (18:44 +0000)
commit15a7164eb7d4d031608fcec2801d7f7b11b16923
tree8c312248c6e95ed32332a44693a627aa07d03986tree | snapshot
parent822d265cedd98a0dbf48b123a3a24f8528bb5842commit | diff
Only call ssl3_init_finished_mac once for DTLS

In DTLS if an IO retry occurs during writing of a fragmented ClientHello
then we can end up reseting the finish mac variables on the retry, which
causes a handshake failure. We should only reset on the first attempt not
on retries.

Thanks to BoringSSL for reporting this issue.

RT#4119

Reviewed-by: Tim Hudson <tjh@openssl.org>
ssl/d1_clnt.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.