generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

no need for empty fragments with TLS 1.1 and later due to explicit IV

Browse Source
This commit is contained in:
Dr. Stephen Henson 2010-06-27 14:43:03 +00:00
parent a7c64928c8
commit 9674de7d3d
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
ssl/t1_enc.c
View File

@ -607,7 +607,8 @@ printf("\nkey block\n");
{ int z; for (z=0; z<num; z++) printf("%02X%c",p1[z],((z+1)%16)?' ':'\n'); }
#endif
if (!(s->options & SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS))
if (!(s->options & SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS)
&& s->method->version <= TLS1_VERSION)
{
/* enable vulnerability countermeasure for CBC ciphers with
* known-IV problem (http://www.openssl.org/~bodo/tls-cbc.txt)