projects / openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 686cf15) | patch
Extended master secret fixes and checks.
authorDr. Stephen Henson <steve@openssl.org>
Fri, 4 Dec 2015 19:48:15 +0000 (19:48 +0000)
committerDr. Stephen Henson <steve@openssl.org>
Tue, 8 Dec 2015 16:32:39 +0000 (16:32 +0000)
commite7f0d9210c4a421e6306cd9a0c486c3e96be4d25
tree4d25ae6bed3a5c5255c688e3459542eef1b7612etree | snapshot
parent686cf15e9dfd3263ec05019f4b2b52253cdcf38ecommit | diff
Extended master secret fixes and checks.

Add new flag TLS1_FLAGS_RECEIVED_EXTMS which is set when the peer sends
the extended master secret extension.

Server now sends extms if and only if the client sent extms.

Check consistency of extms extension when resuming sessions following (where
practical) RFC7627.

Reviewed-by: Matt Caswell <matt@openssl.org>
include/openssl/ssl3.h diff | blob | history
ssl/ssl_locl.h diff | blob | history
ssl/ssl_sess.c diff | blob | history
ssl/t1_lib.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.