David Benjamin ac8302a092 Don't set need_record_splitting until aead_write_ctx is set. ... setup_key_block is called when the first CCS resolves, but for resumptions this is the incoming CCS (see ssl3_do_change_cipher_spec). Rather than set need_record_splitting there, it should be set in the write case of tls1_change_cipher_state. This fixes a crash from the new record layer code in resumption when record-splitting is enabled. Tweak the record-splitting tests to cover this case. This also fixes a bug where renego from a cipher which does require record splitting to one which doesn't continues splitting. Since version switches are not allowed, this can only happen after a renego from CBC to RC4. Change-Id: Ie4e1b91282b10f13887b51d1199f76be4fbf09ad Reviewed-on: https://boringssl-review.googlesource.com/5787 Reviewed-by: Adam Langley <agl@google.com>		2015-09-01 22:30:48 +00:00
crypto	Forbid a server from negotiating both ALPN and NPN.	2015-09-01 20:46:42 +00:00
decrepit	Move arm_arch.h and fix up lots of include paths.	2015-08-26 01:57:59 +00:00
include/openssl	Forbid a server from negotiating both ALPN and NPN.	2015-09-01 20:46:42 +00:00
ssl	Don't set need_record_splitting until aead_write_ctx is set.	2015-09-01 22:30:48 +00:00
tool	Check fread's return value in tool/server.cc.	2015-08-28 22:47:26 +00:00
util	pkcs8.c: Add PBES2 to list of password-based encryption methods.	2015-08-28 20:33:33 +00:00
.clang-format	Inital import.	2014-06-20 13:17:32 -07:00
.gitignore	Fix documentation generation on Windows.	2015-08-19 00:45:42 +00:00
BUILDING	Suggest building at Android API level 16.	2015-06-18 17:32:29 -07:00
CMakeLists.txt	Allow compilation for armv6	2015-06-02 18:16:13 +00:00
codereview.settings	Add a codereview.settings file.	2014-11-18 22:21:33 +00:00
LICENSE	Note that some files carry in Intel license.	2015-07-28 00:55:32 +00:00
STYLE	Require that FOO_free functions do nothing on NULL.	2015-05-04 22:58:13 +00:00