diff options
| author |   jsing <jsing@openbsd.org> | 2020-01-25 09:20:56 +0000 |
|---|---|---|
| committer | jsing <jsing@openbsd.org> | 2020-01-25 09:20:56 +0000 |
| commit | 781d07461b2858d3e9719cdf9c442663e88533d4 (patch) | |
| tree | 1acffeba0686256151e6829a311f16d4b2aefc22 /lib/libssl/tls13_internal.h | |
| parent | when AddKeysToAgent=yes is set and the key contains no comment, (diff) | |
| download | wireguard-openbsd-781d07461b2858d3e9719cdf9c442663e88533d4.tar.xz wireguard-openbsd-781d07461b2858d3e9719cdf9c442663e88533d4.zip | |
It is possible to receive a pre-TLSv1.3 alert in response to a TLSv1.3
client hello.
Allow pre-TLSv1.3 alerts (including warnings) to be received before the
server hello message. Disallow pre-TLSv1.3 alerts as soon as we know that
we are using TLSv1.3.
Noticed by ajacoutot@ while connecting to www.openprinting.org.
ok tb@
Diffstat (limited to 'lib/libssl/tls13_internal.h')
| -rw-r--r-- | lib/libssl/tls13_internal.h | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/lib/libssl/tls13_internal.h b/lib/libssl/tls13_internal.h index 4ff2df6e976..9aabc409d8c 100644 --- a/lib/libssl/tls13_internal.h +++ b/lib/libssl/tls13_internal.h @@ -1,4 +1,4 @@ -/* $OpenBSD: tls13_internal.h,v 1.53 2020/01/24 08:21:24 jsing Exp $ */ +/* $OpenBSD: tls13_internal.h,v 1.54 2020/01/25 09:20:56 jsing Exp $ */ /* * Copyright (c) 2018 Bob Beck <beck@openbsd.org> * Copyright (c) 2018 Theo Buehler <tb@openbsd.org> @@ -122,6 +122,7 @@ struct tls13_record_layer *tls13_record_layer_new(tls13_read_cb wire_read, tls13_phh_sent_cb phh_sent_cb, void *cb_arg); void tls13_record_layer_free(struct tls13_record_layer *rl); void tls13_record_layer_allow_ccs(struct tls13_record_layer *rl, int allow); +void tls13_record_layer_allow_legacy_alerts(struct tls13_record_layer *rl, int allow); void tls13_record_layer_rbuf(struct tls13_record_layer *rl, CBS *cbs); void tls13_record_layer_set_aead(struct tls13_record_layer *rl, const EVP_AEAD *aead); |