Correctly handle a retransmitted ClientHello
authorMatt Caswell <matt@openssl.org>
Thu, 23 Jun 2022 10:39:38 +0000 (11:39 +0100)
committerHugo Landau <hlandau@openssl.org>
Thu, 22 Sep 2022 11:22:09 +0000 (12:22 +0100)
commit81926c91567cd5d11eec38b9980438f45b276d72
tree1037701655e5e516f2f7840d94d0bb012e1c8930
parent0ff98137445ec63249eed3c1e40cf01dc5190c65
Correctly handle a retransmitted ClientHello

If we receive a ClientHello and send back a HelloVerifyRequest, we need
to be able to handle the scenario where the HelloVerifyRequest gets lost
and we receive another ClientHello with the message sequence number set to
0.

Fixes #18635

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Hugo Landau <hlandau@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/18654)
ssl/statem/statem_dtls.c