diff options
| author | Jack Lloyd <[email protected]> | 2016-04-15 02:09:45 -0400 |
|---|---|---|
| committer | Jack Lloyd <[email protected]> | 2016-04-15 02:09:45 -0400 |
| commit | 6315841fca399cf9bdc62b324fdfe0e23b9afbe9 (patch) | |
| tree | 30aada06ff2169efe442c39ccd48e644dcfb2364 /src/cli/tls_proxy.cpp | |
| parent | 0b06b4f61b497c7ad9869441f12ee287b65cde36 (diff) | |
Don't reject TLS packets with zero plaintext bytes
OpenSSL sends an empty record before each new data record in TLS v1.0
to randomize the IV, as a countermeasure to the BEAST attack. Most
implementations use 1/(n-1) splitting for this instead.
Bug introduced with the const time changes in 1.11.23
Diffstat (limited to 'src/cli/tls_proxy.cpp')
0 files changed, 0 insertions, 0 deletions