We should check the eight bytes starting at p[-9] for rollback attack
authorBodo Möller <bodo@openssl.org>
Thu, 17 Jul 2008 22:11:53 +0000 (22:11 +0000)
committerBodo Möller <bodo@openssl.org>
Thu, 17 Jul 2008 22:11:53 +0000 (22:11 +0000)
commit5b331ab77af1a510b97ea57845bfbac1a5db415f
tree9fd494267f61230ba19215603e6d3e89ff59945b
parentdd6f479ea8548ffc56a52ecdaba94c7d277dec83
We should check the eight bytes starting at p[-9] for rollback attack
detection, or the probability for an erroneous RSA_R_SSLV3_ROLLBACK_ATTACK
will be larger than necessary.

PR: 1695
crypto/rsa/rsa_ssl.c