kris/boringssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
407886f589
boringssl/ssl
History
David Benjamin 407886f589 Remove ssl3_check_finished. 
ssl3_get_new_session_ticket is sensible and fills in a session_id for stateless
sessions, so the resumption will already be detected at this point. Remove the
codepath in ssl3_client_hello which allows for resuming sessions with empty
session_ids. The rest of the code doesn't allow it either.

This removes another codepath where we potentially probe a Finished message
early.

Change-Id: I2749b5c65c7ce98c6f30566d8716360ff1bba24c
Reviewed-on: https://boringssl-review.googlesource.com/1295
Reviewed-by: Adam Langley <agl@google.com>
2014-07-23 15:52:38 +00:00
..
pqueue Move public headers to include/openssl/ 2014-07-14 22:42:18 +00:00
test Fix runner.go session ticket support. 2014-07-23 15:31:24 +00:00
CMakeLists.txt Fix magic SSL reason codes. 2014-07-16 18:54:06 +00:00
d1_both.c Make init_msg a uint8_t*. 2014-07-14 21:43:20 +00:00
d1_clnt.c Remove ssl3_check_finished. 2014-07-23 15:52:38 +00:00
d1_enc.c Remove crypto/comp and SSL_COMP support code. 2014-06-24 17:22:06 +00:00
d1_lib.c DTLS: fix memory leak when allocation fails. 2014-06-26 17:46:27 -07:00
d1_meth.c Inital import. 2014-06-20 13:17:32 -07:00
d1_pkt.c Remove heartbeat extension. 2014-06-26 20:48:19 +00:00
d1_srtp.c Fix typo in DTLS-SRTP extension parsing. 2014-07-18 00:52:51 +00:00
d1_srvr.c Remove remnants of KRB5 support. 2014-07-14 20:49:57 +00:00
s3_both.c Make init_msg a uint8_t*. 2014-07-14 21:43:20 +00:00
s3_cbc.c Remove OPENSSL_FIPS blocks. 2014-07-07 20:31:50 +00:00
s3_clnt.c Remove ssl3_check_finished. 2014-07-23 15:52:38 +00:00
s3_enc.c Have BIO_get_mem_data return a size_t and uint8_t* 2014-07-18 17:22:05 +00:00
s3_lib.c Separate client and server certificate_types. 2014-07-09 19:51:08 +00:00
s3_meth.c Inital import. 2014-06-20 13:17:32 -07:00
s3_pkt.c Remove heartbeat extension. 2014-06-26 20:48:19 +00:00
s3_srvr.c Don't accidentally read Finished in ssl3_get_cert_verify. 2014-07-23 15:45:55 +00:00
s23_clnt.c Remove OPENSSL_FIPS blocks. 2014-07-07 20:31:50 +00:00
s23_lib.c Inital import. 2014-06-20 13:17:32 -07:00
s23_meth.c Inital import. 2014-06-20 13:17:32 -07:00
s23_pkt.c Inital import. 2014-06-20 13:17:32 -07:00
s23_srvr.c Remove OPENSSL_FIPS blocks. 2014-07-07 20:31:50 +00:00
ssl_algs.c Inital import. 2014-06-20 13:17:32 -07:00
ssl_asn1.c Remove OPENSSL_NO_TLSEXT compilation option. 2014-07-07 20:31:37 +00:00
ssl_cert.c Separate client and server certificate_types. 2014-07-09 19:51:08 +00:00
ssl_ciph.c Be strict about requiring ServerKeyExchange. 2014-07-14 21:42:30 +00:00
ssl_error.c Fix magic SSL reason codes. 2014-07-16 18:54:06 +00:00
ssl_lib.c Port ssl3_get_client_hello to CBS. 2014-07-15 18:30:09 +00:00
ssl_locl.h Remove ssl3_check_finished. 2014-07-23 15:52:38 +00:00
ssl_rsa.c Introduce EVP_PKEY_is_opaque to replace RSA_METHOD_FLAG_NO_CHECK. 2014-07-18 23:35:04 +00:00
ssl_sess.c Port ssl3_get_client_hello to CBS. 2014-07-15 18:30:09 +00:00
ssl_stat.c Add support for asynchronous session lookup. 2014-06-20 13:17:32 -07:00
ssl_test.c Fix magic SSL reason codes. 2014-07-16 18:54:06 +00:00
ssl_txt.c Port ssl3_get_new_session_ticket to CBS. 2014-07-14 23:38:16 +00:00
t1_clnt.c Inital import. 2014-06-20 13:17:32 -07:00
t1_enc.c Perform bounds checks in hmac_signctx. 2014-07-10 20:59:10 +00:00
t1_lib.c Fix another flipped condition. 2014-07-16 17:11:47 +00:00
t1_meth.c Inital import. 2014-06-20 13:17:32 -07:00
t1_reneg.c Port ssl3_get_client_hello to CBS. 2014-07-15 18:30:09 +00:00
t1_srvr.c Inital import. 2014-06-20 13:17:32 -07:00