boringssl

Verlauf

David Benjamin 5510863fbd Temporary remove the TLS 1.3 anti-downgrade mechanism. This mechanism is incompatible with deploying draft versions of TLS 1.3. Suppose a draft M client talks to a draft N server, M != N. (Either M or N could also be the final standard revision should there be lingering draft clients or servers.) The server will notice the mismatch and pretend ClientHello.version is TLS 1.2, not TLS 1.3. But this will trigger anti-downgrade signal and cause an interop failure! And if it doesn't trigger, all the clever tricks around ServerHello.random being signed in TLS 1.2 are moot. We'll put this back when the dust has settled. Change-Id: Ic3cf72b7c31ba91e5cca0cfd7a3fca830c493a43 Reviewed-on: https://boringssl-review.googlesource.com/11005 Reviewed-by: Steven Valdez <svaldez@google.com> Reviewed-by: David Benjamin <davidben@google.com> Commit-Queue: David Benjamin <davidben@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>		vor 8 Jahren
..
test	Temporary remove the TLS 1.3 anti-downgrade mechanism.	vor 8 Jahren
CMakeLists.txt	Add TLS 1.3 1-RTT.	vor 8 Jahren
custom_extensions.c	Send unsupported_extension on unexpected ServerHello extensions.	vor 8 Jahren
d1_both.c	Switch finish_handshake to release_current_message.	vor 8 Jahren
d1_lib.c	Test that servers enforce session timeouts.	vor 8 Jahren
d1_pkt.c	Move post-handshake message handling out of read_app_data.	vor 8 Jahren
d1_srtp.c	Make kSRTPProfiles static.	vor 8 Jahren
dtls_method.c	Switch finish_handshake to release_current_message.	vor 8 Jahren
dtls_record.c	Fix the alias checks in dtls_record.c.	vor 8 Jahren
handshake_client.c	Temporary remove the TLS 1.3 anti-downgrade mechanism.	vor 8 Jahren
handshake_server.c	Temporary remove the TLS 1.3 anti-downgrade mechanism.	vor 8 Jahren
internal.h	Fix a number of sigalg scope issues.	vor 8 Jahren
s3_both.c	Fix a number of sigalg scope issues.	vor 8 Jahren
s3_enc.c	Splitting SSL session state.	vor 8 Jahren
s3_lib.c	Pass a ClientHello into ssl3_choose_cipher.	vor 8 Jahren
s3_pkt.c	Stop pretending to ssl_clear_bad_session.	vor 8 Jahren
ssl_aead_ctx.c	Fixing iv_length for TLS 1.3.	vor 8 Jahren
ssl_asn1.c	Undo rename of tlsext_tick_lifetime_hint.	vor 8 Jahren
ssl_buffer.c	Add SSL_is_dtls.	vor 8 Jahren
ssl_cert.c	Set verify_result, even on failure.	vor 8 Jahren
ssl_cipher.c	Remove RC4 ciphersuites from TLS.	vor 8 Jahren
ssl_ecdh.c	Adding ARRAY_SIZE macro for getting the size of constant arrays.	vor 8 Jahren
ssl_file.c	Banish SSL_add_dir_cert_subjects_to_stack and OPENSSL_DIR_CTX to decrepit.	vor 8 Jahren
ssl_lib.c	Declare SSL_R_BLOCK_CIPHER_PAD_IS_WRONG and SSL_R_NO_CIPHERS_SPECIFIED.	vor 8 Jahren
ssl_rsa.c	Fix a number of sigalg scope issues.	vor 8 Jahren
ssl_session.c	Don't crash when a session callback returns NULL.	vor 8 Jahren
ssl_stat.c	Factor out the client_cert_cb code.	vor 8 Jahren
ssl_test.cc	Replace Scoped* heap types with bssl::UniquePtr.	vor 8 Jahren
t1_enc.c	Splitting SSL session state.	vor 8 Jahren
t1_lib.c	Enable RSA-PSS in TLS 1.2 by default.	vor 8 Jahren
tls13_both.c	Implement BORINGSSL_UNSAFE_FUZZER_MODE for TLS 1.3.	vor 8 Jahren
tls13_client.c	Request contexts are now illegal during the handshake.	vor 8 Jahren
tls13_enc.c	const-correct a variable.	vor 8 Jahren
tls13_server.c	Fix a number of sigalg scope issues.	vor 8 Jahren
tls_method.c	Add TLS_{client,server}_method.	vor 8 Jahren
tls_record.c	Stop pretending to ssl_clear_bad_session.	vor 8 Jahren