瀏覽代碼

Clean up end_of_early_data processing.

Remove another remnant of the SSL3_PROTOCOL_METHOD hook.

Change-Id: If6bf055e2ee318420e4c5c40b8eb5356eadda68c
Reviewed-on: https://boringssl-review.googlesource.com/14381
Commit-Queue: David Benjamin <davidben@google.com>
Commit-Queue: Steven Valdez <svaldez@chromium.org>
Reviewed-by: Steven Valdez <svaldez@chromium.org>
Reviewed-by: David Benjamin <davidben@google.com>
kris/onging/CECPQ3_patch15
David Benjamin 7 年之前
父節點
當前提交
bbfe603519
共有 2 個檔案被更改,包括 8 行新增29 行删除
  1. +0
    -1
      ssl/internal.h
  2. +8
    -28
      ssl/s3_pkt.c

+ 0
- 1
ssl/internal.h 查看文件

@@ -2078,7 +2078,6 @@ int ssl3_dispatch_alert(SSL *ssl);
int ssl3_read_app_data(SSL *ssl, int *out_got_handshake, uint8_t *buf, int len,
int peek);
int ssl3_read_change_cipher_spec(SSL *ssl);
int ssl3_read_end_of_early_data(SSL *ssl);
void ssl3_read_close_notify(SSL *ssl);
int ssl3_read_handshake_bytes(SSL *ssl, uint8_t *buf, int len);
int ssl3_write_app_data(SSL *ssl, const uint8_t *buf, int len);


+ 8
- 28
ssl/s3_pkt.c 查看文件

@@ -372,15 +372,19 @@ int ssl3_read_app_data(SSL *ssl, int *out_got_handshake, uint8_t *buf, int len,
return -1;
}

/* Handle the end_of_early_data alert. */
if (rr->type == SSL3_RT_ALERT &&
rr->length == 2 &&
rr->data[0] == SSL3_AL_WARNING &&
rr->data[1] == TLS1_AD_END_OF_EARLY_DATA &&
ssl->server &&
ssl->s3->hs != NULL &&
ssl->s3->hs->can_early_read &&
ssl3_protocol_version(ssl) >= TLS1_3_VERSION) {
int ret = ssl3_read_end_of_early_data(ssl);
if (ret <= 0) {
return ret;
}
/* Consume the record. */
rr->length = 0;
ssl_read_buffer_discard(ssl);
/* Stop accepting early data. */
ssl->s3->hs->can_early_read = 0;
*out_got_handshake = 1;
return -1;
@@ -430,30 +434,6 @@ int ssl3_read_change_cipher_spec(SSL *ssl) {
return 1;
}

int ssl3_read_end_of_early_data(SSL *ssl) {
SSL3_RECORD *rr = &ssl->s3->rrec;

if (rr->length == 0) {
int ret = ssl3_get_record(ssl);
if (ret <= 0) {
return ret;
}
}

if (rr->type != SSL3_RT_ALERT ||
rr->length != 2 ||
rr->data[0] != SSL3_AL_WARNING ||
rr->data[1] != TLS1_AD_END_OF_EARLY_DATA) {
ssl3_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_UNEXPECTED_MESSAGE);
OPENSSL_PUT_ERROR(SSL, SSL_R_UNEXPECTED_RECORD);
return -1;
}

rr->length = 0;
ssl_read_buffer_discard(ssl);
return 1;
}

void ssl3_read_close_notify(SSL *ssl) {
/* Read records until an error or close_notify. */
while (ssl3_get_record(ssl) > 0) {


Loading…
取消
儲存