]> granicus.if.org Git - openssl/commit
[PR3597] Advance to the next state variant when reusing messages.
authorRichard Levitte <levitte@openssl.org>
Fri, 28 Nov 2014 19:40:10 +0000 (20:40 +0100)
committerRichard Levitte <levitte@openssl.org>
Fri, 28 Nov 2014 22:31:28 +0000 (23:31 +0100)
commit67a0ea702b588a1cfc7ad854c078aef898237051
treeb3e78103e8b8f36a5f68b826765cccdb8ae7be56
parent89e1e5c84def91cc4fe1b2c6d621ab1ad684b4ec
[PR3597] Advance to the next state variant when reusing messages.

Previously, state variant was not advanced, which resulted in state
being stuck in the st1 variant (usually "_A").

This broke certificate callback retry logic when accepting connections
that were using SSLv2 ClientHello (hence reusing the message), because
their state never advanced to SSL3_ST_SR_CLNT_HELLO_C variant required
for the retry code path.

Reported by Yichun Zhang (agentzh).

Signed-off-by: Piotr Sikora <piotr@cloudflare.com>
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
ssl/s3_both.c