boringssl/ssl
David Benjamin ef5885e410 Don't change s->version after have_version is set.
Those version checks are if renego tried to change the version, but at that
point we're out of the initial null cipher and should leave the version fixed.

(On the server end, the code in question was dead after the version negotiation
rewrite anyway.)

Change-Id: I3242ba11bc9981ccf7fdb867176d59846cc49dd9
Reviewed-on: https://boringssl-review.googlesource.com/2605
Reviewed-by: Adam Langley <agl@google.com>
2014-12-16 01:44:35 +00:00
..
pqueue Test insertion of duplicates in pqueue_test. 2014-11-06 01:46:57 +00:00
test Add tests for version negotiation failure alerts. 2014-12-13 15:23:28 -08:00
CMakeLists.txt Merge SSLv23_method and DTLS_ANY_VERSION. 2014-12-13 15:22:21 -08:00
d1_both.c Add outgoing messages to the handshake hash at set_handshake_header. 2014-12-16 01:43:51 +00:00
d1_clnt.c Reformatting of several DTLS source files. 2014-12-13 16:28:18 -08:00
d1_lib.c Add outgoing messages to the handshake hash at set_handshake_header. 2014-12-16 01:43:51 +00:00
d1_meth.c Reformatting of several DTLS source files. 2014-12-13 16:28:18 -08:00
d1_pkt.c Reformatting of several DTLS source files. 2014-12-13 16:28:18 -08:00
d1_srtp.c Add less dangerous versions of SRTP functions. 2014-10-27 21:58:09 +00:00
d1_srvr.c Add outgoing messages to the handshake hash at set_handshake_header. 2014-12-16 01:43:51 +00:00
s3_both.c Add outgoing messages to the handshake hash at set_handshake_header. 2014-12-16 01:43:51 +00:00
s3_cbc.c Add malloc failure tests. 2014-11-19 01:24:46 +00:00
s3_clnt.c Don't change s->version after have_version is set. 2014-12-16 01:44:35 +00:00
s3_enc.c Check EVP_Cipher return values. 2014-12-05 17:30:13 +00:00
s3_lib.c Add outgoing messages to the handshake hash at set_handshake_header. 2014-12-16 01:43:51 +00:00
s3_meth.c Merge SSLv23_method and DTLS_ANY_VERSION. 2014-12-13 15:22:21 -08:00
s3_pkt.c Use have_version in clamping TLS record-layer version to 1.0. 2014-12-13 23:19:36 +00:00
s3_srvr.c Don't change s->version after have_version is set. 2014-12-16 01:44:35 +00:00
ssl_algs.c Remove indirection in loading ciphers. 2014-09-15 21:06:10 +00:00
ssl_asn1.c Remove psk_identity_hint from SSL_SESSION. 2014-11-10 23:59:47 +00:00
ssl_cert.c Remove redundant checks in ssl_cert_dup. 2014-12-05 17:27:23 +00:00
ssl_ciph.c Merge SSLv23_method and DTLS_ANY_VERSION. 2014-12-13 15:22:21 -08:00
ssl_error.c Implement the V2ClientHello sniff in version-locked methods. 2014-12-13 15:22:21 -08:00
ssl_lib.c Merge SSLv23_method and DTLS_ANY_VERSION. 2014-12-13 15:22:21 -08:00
ssl_locl.h Add outgoing messages to the handshake hash at set_handshake_header. 2014-12-16 01:43:51 +00:00
ssl_rsa.c Clean up ssl_set_cert_masks. 2014-11-18 22:21:52 +00:00
ssl_sess.c Remove redundant SSL_ST_BEFORE-related checks. 2014-12-13 22:31:16 +00:00
ssl_stat.c Trim impossible state combinations. 2014-12-02 19:31:00 +00:00
ssl_test.c Merge SSLv23_method and DTLS_ANY_VERSION. 2014-12-13 15:22:21 -08:00
ssl_txt.c Remove some remnants of SSLv2. 2014-11-17 20:27:13 +00:00
t1_enc.c Merge SSLv23_method and DTLS_ANY_VERSION. 2014-12-13 15:22:21 -08:00
t1_lib.c Add outgoing messages to the handshake hash at set_handshake_header. 2014-12-16 01:43:51 +00:00
t1_reneg.c Port ssl3_get_client_hello to CBS. 2014-07-15 18:30:09 +00:00