boringssl

Verlauf

David Benjamin 78e6978ab9 Disable NPN and Channel ID in DTLS. They're not in the duplicated handshake state machines anyway. But we still shouldn't negotiate them. d1_pkt.c assumes Finished is the only post-CCS handshake message. An unexpected handshake message in the current epoch may either be a retransmit/out-of-order message from the previous handshake, or a message from the next handshake (also potentially out-of-order). In the former case, we shouldn't spin up another handshake state machine instance. (This assumption is required due to a protocol bug. DTLS resets sequence numbers after a handshake, so it is necessary to categorize handshake fragments by pre-CCS and post-CCS to distinguish between retransmit and renego.) Change-Id: Ib3c1c7085c729e36a40f7ff14494733156924a24 Reviewed-on: https://boringssl-review.googlesource.com/3028 Reviewed-by: Adam Langley <agl@google.com>		vor 9 Jahren
..
pqueue	Test insertion of duplicates in pqueue_test.	vor 10 Jahren
test	Clear the error queue when dropping a bad DTLS packet.	vor 9 Jahren
CMakeLists.txt	Remove dead code from EVP_CIPHER codepaths.	vor 9 Jahren
d1_both.c	Clarify dtls1_do_write's interaction with the buffering BIO.	vor 9 Jahren
d1_clnt.c	Reformatting of several DTLS source files.	vor 10 Jahren
d1_lib.c	Account for the MTU BIO_ctrls returning negative or overly large numbers.	vor 9 Jahren
d1_meth.c	Implement SSL_clear with ssl_new and ssl_free.	vor 9 Jahren
d1_pkt.c	Clear the error queue when dropping a bad DTLS packet.	vor 9 Jahren
d1_srtp.c	Store SRTP_PROTECTION_PROFILES as const.	vor 9 Jahren
d1_srvr.c	Don't allow CCS just before CertificateVerify in DTLS.	vor 9 Jahren
s3_both.c	Touch up ssl3_get_message.	vor 9 Jahren
s3_clnt.c	Remove SSL_SESSION::cipher_id.	vor 9 Jahren
s3_enc.c	Implement SSLv3 ciphers with stateful AEADs.	vor 9 Jahren
s3_lib.c	Switch OBJ_undef uses to NID_undef.	vor 9 Jahren
s3_meth.c	Implement SSL_clear with ssl_new and ssl_free.	vor 9 Jahren
s3_pkt.c	Normalize tls1_enc return values.	vor 9 Jahren
s3_srvr.c	Remove constraints on curve ID values.	vor 9 Jahren
ssl_algs.c	Make SSL_load_error_strings a no-op.	vor 9 Jahren
ssl_asn1.c	Remove SSL_SESSION::cipher_id.	vor 9 Jahren
ssl_cert.c	Add (void) to some macros to satisfy compiler.	vor 9 Jahren
ssl_ciph.c	ssl_create_cipher_list: check whether push onto cipherstack succeeds	vor 9 Jahren
ssl_error.c	Guard against small MTUs from the BIO.	vor 9 Jahren
ssl_lib.c	Return SSL_ERROR_SYSCALL on unclean EOF.	vor 9 Jahren
ssl_locl.h	aarch64 support.	vor 9 Jahren
ssl_rsa.c	Reformat the rest of ssl/.	vor 9 Jahren
ssl_sess.c	Tag a number of globals as const.	vor 9 Jahren
ssl_stat.c	Reformat the rest of ssl/.	vor 9 Jahren
ssl_test.c	Merge SSLv23_method and DTLS_ANY_VERSION.	vor 10 Jahren
ssl_txt.c	Remove SSL_SESSION::cipher_id.	vor 9 Jahren
t1_enc.c	Normalize tls1_enc return values.	vor 9 Jahren
t1_lib.c	Disable NPN and Channel ID in DTLS.	vor 9 Jahren
t1_reneg.c	Reformat the rest of ssl/.	vor 9 Jahren