diff options
| author | Jack Lloyd <[email protected]> | 2017-11-28 14:18:39 -0500 |
|---|---|---|
| committer | Jack Lloyd <[email protected]> | 2017-11-28 14:18:39 -0500 |
| commit | bf59cc53a768cd0ea1deb78a9a75c3bc92d466e6 (patch) | |
| tree | cf46ecfe41c17d6687e9e148c6cb8a89f827e6f8 /src/lib/tls/tls_version.h | |
| parent | 7ff369a0a26cfd9803d58eeb0206204890779b79 (diff) | |
Correct version selection logic in TLS server
Due to an oversight in the logic, previously a client attempt to
negotiate SSLv3 would result in the server trying to negotiate
TLS v1.2. Now instead they get a protocol_error alert.
Similarly, detect the the (invalid) case of a major number <= 2,
which does not coorespond to any real TLS version. The server
would again reply as a TLS v1.2 server in that case, and now
just closes the connection with an alert.
Diffstat (limited to 'src/lib/tls/tls_version.h')
0 files changed, 0 insertions, 0 deletions