Extend ServerKeyExchange parsing to work with a signature
authorMatt Caswell <matt@openssl.org>
Thu, 5 Jan 2017 12:32:06 +0000 (12:32 +0000)
committerMatt Caswell <matt@openssl.org>
Tue, 10 Jan 2017 23:02:50 +0000 (23:02 +0000)
commit79d8c167857d1c776a6fbdb2aff166a126cab03e
treed766256c0022c8462304b8bef8755140073d23ba
parentadb403dea90cd3e2fb028bb16d44364a7b5d75d1
Extend ServerKeyExchange parsing to work with a signature

Previously SKE in TLSProxy only knew about one anonymous ciphersuite so
there was never a signature. Extend that to include a ciphersuite that is
not anonymous. This also fixes a bug where the existing SKE processing was
checking against the wrong anon ciphersuite value. This has a knock on
impact on the sslskewith0p test. The bug meant the test was working...but
entirely by accident!

Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2157)
test/recipes/70-test_sslskewith0p.t
util/TLSProxy/Message.pm
util/TLSProxy/ServerKeyExchange.pm