IABSD.fr/src/lib/libssl

Branch : - branch - master - tag -

• Show log

  Commit

• Author : tb
  Date : 2026-05-09 11:45:50
  Hash : 177318a7
  Message : libssl: record extension lengths in ClientHello hashing The ClientHello hash is intended to ensure that the second CH after an HRR only makes the allowed changes to the TLS extensiosn by recording message type followed by the raw extension data if it must remain unchanged. This makes it possible (in principle) that part of free form extension data is confused with type (and length) information of a subsequent extension. Recording the length after the type prevents such a confusion and fixes the framing of the extensions. Found by Frank Denis ok jsing

• Files
• LICENSE
• Makefile
• Symbols.list
• bio_ssl.c
• bs_ber.c
• bs_cbb.c
• bs_cbs.c
• bytestring.h
• d1_both.c
• d1_lib.c
• d1_pkt.c
• d1_srtp.c
• doc
• dtls1.h
• dtls_local.h
• generate_pkgconfig.sh
• hidden
• man
• pqueue.c
• pqueue.h
• s3_cbc.c
• s3_lib.c
• shlib_version
• srtp.h
• ssl.h
• ssl3.h
• ssl_asn1.c
• ssl_both.c
• ssl_cert.c
• ssl_ciph.c
• ssl_ciphers.c
• ssl_clnt.c
• ssl_err.c
• ssl_init.c
• ssl_kex.c
• ssl_lib.c
• ssl_local.h
• ssl_methods.c
• ssl_pkt.c
• ssl_rsa.c
• ssl_seclevel.c
• ssl_sess.c
• ssl_sigalgs.c
• ssl_sigalgs.h
• ssl_srvr.c
• ssl_stat.c
• ssl_tlsext.c
• ssl_tlsext.h
• ssl_transcript.c
• ssl_txt.c
• ssl_versions.c
• t1_enc.c
• t1_lib.c
• tls1.h
• tls12_internal.h
• tls12_key_schedule.c
• tls12_lib.c
• tls12_record_layer.c
• tls13_client.c
• tls13_error.c
• tls13_handshake.c
• tls13_handshake.h
• tls13_handshake_msg.c
• tls13_internal.h
• tls13_key_schedule.c
• tls13_legacy.c
• tls13_lib.c
• tls13_quic.c
• tls13_record.c
• tls13_record.h
• tls13_record_layer.c
• tls13_server.c
• tls_buffer.c
• tls_content.c
• tls_content.h
• tls_internal.h
• tls_key_share.c
• tls_lib.c