generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

perform sanity checks on server certificate type as soon as it is received instead of waiting until server key exchange

Browse Source 
(backport from HEAD)
This commit is contained in:
Dr. Stephen Henson
2012-12-26 16:22:19 +00:00
parent 79dcae32ef
commit 67d9dcf003
6 changed files with 62 additions and 49 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
ssl/ssl_err.c
View File

@@ -608,6 +608,7 @@ static ERR_STRING_DATA SSL_str_reasons[]=
{ERR_REASON(SSL_R_UNSUPPORTED_STATUS_TYPE),"unsupported status type"},
{ERR_REASON(SSL_R_USE_SRTP_NOT_NEGOTIATED),"use srtp not negotiated"},
{ERR_REASON(SSL_R_WRITE_BIO_NOT_SET) ,"write bio not set"},
{ERR_REASON(SSL_R_WRONG_CERTIFICATE_TYPE),"wrong certificate type"},
{ERR_REASON(SSL_R_WRONG_CIPHER_RETURNED) ,"wrong cipher returned"},
{ERR_REASON(SSL_R_WRONG_CURVE) ,"wrong curve"},
{ERR_REASON(SSL_R_WRONG_MESSAGE_TYPE) ,"wrong message type"},