kris/boringssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

FALLBACK_SCSV is an RFC now.

Browse Source 
Update references.

Change-Id: I56af31529cf6bfd00d3f0bb9b6281645ed134c5c
Reviewed-on: https://boringssl-review.googlesource.com/5555
Reviewed-by: Adam Langley <agl@google.com>
This commit is contained in:
David Benjamin 2015-07-25 15:08:18 -04:00 committed by Adam Langley
parent 8bc81df02b
commit 229adfb42b
2 changed files with 4 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
include/openssl/ssl.h
View File

@ -448,12 +448,10 @@ OPENSSL_EXPORT uint32_t SSL_get_options(const SSL *ssl);
/* SSL_MODE_SEND_FALLBACK_SCSV sends TLS_FALLBACK_SCSV in the ClientHello. /* SSL_MODE_SEND_FALLBACK_SCSV sends TLS_FALLBACK_SCSV in the ClientHello.
* To be set only by applications that reconnect with a downgraded protocol * To be set only by applications that reconnect with a downgraded protocol
* version; see https://tools.ietf.org/html/draft-ietf-tls-downgrade-scsv-05 * version; see RFC 7507 for details.
* for details.
* *
* DO NOT ENABLE THIS if your application attempts a normal handshake. Only use * DO NOT ENABLE THIS if your application attempts a normal handshake. Only use
* this in explicit fallback retries, following the guidance in * this in explicit fallback retries, following the guidance in RFC 7507. */
* draft-ietf-tls-downgrade-scsv-05. */
#define SSL_MODE_SEND_FALLBACK_SCSV 0x00000400L #define SSL_MODE_SEND_FALLBACK_SCSV 0x00000400L
/* The following flags do nothing and are included only to make it easier to /* The following flags do nothing and are included only to make it easier to

5
include/openssl/ssl3.h
View File

@ -132,10 +132,9 @@ extern "C" {
#define SSL2_MT_CLIENT_HELLO 1 #define SSL2_MT_CLIENT_HELLO 1
#define SSL2_VERSION 0x0002 #define SSL2_VERSION 0x0002
/* Signalling cipher suite value: from RFC5746 */ /* Signalling cipher suite value from RFC 5746. */
#define SSL3_CK_SCSV 0x030000FF #define SSL3_CK_SCSV 0x030000FF
/* Fallback signalling cipher suite value: not IANA assigned. /* Fallback signalling cipher suite value from RFC 7507. */
* See https://tools.ietf.org/html/draft-bmoeller-tls-downgrade-scsv-01 */
#define SSL3_CK_FALLBACK_SCSV 0x03005600 #define SSL3_CK_FALLBACK_SCSV 0x03005600
#define SSL3_CK_RSA_NULL_MD5 0x03000001 #define SSL3_CK_RSA_NULL_MD5 0x03000001