Fix end-point shared secret for DTLS/SCTP
authorMichael Tuexen <tuexen@fh-muenster.de>
Wed, 26 Dec 2018 11:44:53 +0000 (12:44 +0100)
committerMatt Caswell <matt@openssl.org>
Fri, 1 Feb 2019 12:03:43 +0000 (12:03 +0000)
commit243ff51cc6757ab56cda4a7f69fbdcddf81141b6
tree71177c7b975c9945d27c25356eb4edc0b0be2a8d
parent1b66fc87da7c3851d7229993219336afa587f325
Fix end-point shared secret for DTLS/SCTP

When computing the end-point shared secret, don't take the
terminating NULL character into account.
Please note that this fix breaks interoperability with older
versions of OpenSSL, which are not fixed.

Fixes #7956

Reviewed-by: Kurt Roeckx <kurt@roeckx.be>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/7957)

(cherry picked from commit 09d62b336d9e2a11b330d45d4f0f3f37cbb0d674)
15 files changed:
CHANGES
apps/s_client.c
apps/s_server.c
doc/man1/s_client.pod
doc/man1/s_server.pod
doc/man3/SSL_CTX_set_mode.pod
include/openssl/ssl.h
ssl/statem/statem_clnt.c
ssl/statem/statem_srvr.c
test/handshake_helper.c
test/recipes/80-test_ssl_new.t
test/ssl-tests/29-dtls-sctp-label-bug.conf [new file with mode: 0644]
test/ssl-tests/29-dtls-sctp-label-bug.conf.in [new file with mode: 0644]
test/ssl_test_ctx.c
test/ssl_test_ctx.h