David Benjamin e6f2221423 Enforce record-layer version numbers. ... We used to enforce after the version was set, but stopped enforcing with TLS 1.3. NSS enforces the value for encrypted records, which makes sense and avoids the problems gating it on have_version. Add tests for this. Change-Id: I7fb5f94ab4a22e8e3b1c14205aa934952d671727 Reviewed-on: https://boringssl-review.googlesource.com/12143 Reviewed-by: David Benjamin <davidben@google.com> Commit-Queue: David Benjamin <davidben@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>		2016-11-13 05:28:35 +00:00
..
test	Enforce record-layer version numbers.	2016-11-13 05:28:35 +00:00
CMakeLists.txt	Add TLS 1.3 1-RTT.	2016-07-18 09:54:46 +00:00
custom_extensions.c	Move extensions bitmasks into SSL_HANDSHAKE.	2016-10-09 16:48:52 +00:00
d1_both.c	Tidy up finish_message logic.	2016-11-12 05:57:08 +00:00
d1_lib.c	Remove RC4 from TLS for real.	2016-09-16 03:06:36 +00:00
d1_pkt.c	Expose SSL_max_seal_overhead.	2016-11-09 16:51:46 +00:00
d1_srtp.c	Fix ssl_ctx_make_profiles error handling.	2016-09-27 13:27:06 +00:00
dtls_method.c	Splitting finish_message to finish_message/queue_message.	2016-11-12 05:01:20 +00:00
dtls_record.c	Take the version parameter out of ssl_do_msg_callback.	2016-09-21 18:55:27 +00:00
handshake_client.c	Move tlsext_ticket_expected to SSL_HANDSHAKE.	2016-11-12 07:32:42 +00:00
handshake_server.c	Move tlsext_ticket_expected to SSL_HANDSHAKE.	2016-11-12 07:32:42 +00:00
internal.h	Move tlsext_ticket_expected to SSL_HANDSHAKE.	2016-11-12 07:32:42 +00:00
s3_both.c	Tidy up finish_message logic.	2016-11-12 05:57:08 +00:00
s3_enc.c	Move key_block into SSL_HANDSHAKE.	2016-11-09 17:02:33 +00:00
s3_lib.c	Move key_block into SSL_HANDSHAKE.	2016-11-09 17:02:33 +00:00
s3_pkt.c	Expose SSL_max_seal_overhead.	2016-11-09 16:51:46 +00:00
ssl_aead_ctx.c	Validate input iv/mac sizes in SSL_AEAD_CTX_new.	2016-10-28 21:25:35 +00:00
ssl_asn1.c	Rename X.509 members in |SSL_SESSION| and |CERT|.	2016-11-09 20:07:57 +00:00
ssl_buffer.c	Add SSL_is_dtls.	2016-08-02 20:43:58 +00:00
ssl_cert.c	Rename X.509 members in |SSL_SESSION| and |CERT|.	2016-11-09 20:07:57 +00:00
ssl_cipher.c	Trim ssl_create_cipher_list slightly.	2016-11-03 22:19:53 +00:00
ssl_ecdh.c	Implement SSL_CTX_set1_curves_list()	2016-09-30 00:45:19 +00:00
ssl_file.c	Check for sk_X509_NAME_push failures.	2016-09-27 13:18:37 +00:00
ssl_lib.c	Move tlsext_ticket_expected to SSL_HANDSHAKE.	2016-11-12 07:32:42 +00:00
ssl_rsa.c	Rename X.509 members in |SSL_SESSION| and |CERT|.	2016-11-09 20:07:57 +00:00
ssl_session.c	Move tlsext_ticket_expected to SSL_HANDSHAKE.	2016-11-12 07:32:42 +00:00
ssl_stat.c	Add the certificate_required alert.	2016-10-10 15:48:06 +00:00
ssl_test.cc	Measure session->timeout from ticket issuance.	2016-11-08 23:51:10 +00:00
t1_enc.c	Move key_block into SSL_HANDSHAKE.	2016-11-09 17:02:33 +00:00
t1_lib.c	Add missing PSK identity comment.	2016-11-13 05:22:38 +00:00
tls13_both.c	Splitting finish_message to finish_message/queue_message.	2016-11-12 05:01:20 +00:00
tls13_client.c	Splitting finish_message to finish_message/queue_message.	2016-11-12 05:01:20 +00:00
tls13_enc.c	Validate input iv/mac sizes in SSL_AEAD_CTX_new.	2016-10-28 21:25:35 +00:00
tls13_server.c	Splitting finish_message to finish_message/queue_message.	2016-11-12 05:01:20 +00:00
tls_method.c	Splitting finish_message to finish_message/queue_message.	2016-11-12 05:01:20 +00:00
tls_record.c	Enforce record-layer version numbers.	2016-11-13 05:28:35 +00:00