Don't buffer in the record writer at all - we immediately process and

send out inputs as they are available. Thus, flushing is never
required, and we avoid some unnecessary copying.

If we are using a CBC mode cipher in SSLv3/TLSv1.0, send a 1-byte
fragment to start to prevent the adaptive plaintext attack.

1 files changed, 0 insertions, 1 deletions

diff --git a/src/tls/tls_client.cpp b/src/tls/tls_client.cpp
index 5dbcadaea..b58a6766f 100644
--- a/src/tls/tls_client.cpp
+++ b/src/tls/tls_client.cpp
@@ -236,7 +236,6 @@ void TLS_Client::process_handshake_msg(Handshake_Type type,
                                 state->server_hello->random());
 
       writer.send(CHANGE_CIPHER_SPEC, 1);
-      writer.flush();
 
       writer.set_keys(state->suite, state->keys, CLIENT);