make update, and more DTLS stuff.
This commit is contained in:
parent
49f42ec0f6
commit
bb99ce5f80
10
CHANGES
10
CHANGES
@ -4,6 +4,16 @@
|
||||
|
||||
Changes between 0.9.8e and 0.9.8f [xx XXX xxxx]
|
||||
|
||||
*) DTLS Handshake overhaul. There were longstanding issues with
|
||||
OpenSSL DTLS implementation, which were making it impossible for
|
||||
RFC 4347 compliant client to communicate with OpenSSL server.
|
||||
Unfortunately just fixing these incompatibilities would "cut off"
|
||||
pre-0.9.8f clients. To allow for hassle free upgrade post-0.9.8e
|
||||
server keeps tolerating non RFC compliant syntax. The opposite is
|
||||
not true, 0.9.8f client can not communicate with earlier server.
|
||||
This update even addresses CVE-2007-4995.
|
||||
[Andy Polyakov]
|
||||
|
||||
*) Changes to avoid need for function casts in OpenSSL: some compilers
|
||||
(gcc 4.2 and later) reject their use.
|
||||
[Kurt Roeckx <kurt@roeckx.be>, Peter Hartley <pdh@utter.chaos.org.uk>,
|
||||
|
14
ssl/Makefile
14
ssl/Makefile
@ -238,13 +238,13 @@ d1_pkt.o: ../include/openssl/opensslconf.h ../include/openssl/opensslv.h
|
||||
d1_pkt.o: ../include/openssl/ossl_typ.h ../include/openssl/pem.h
|
||||
d1_pkt.o: ../include/openssl/pem2.h ../include/openssl/pkcs7.h
|
||||
d1_pkt.o: ../include/openssl/pq_compat.h ../include/openssl/pqueue.h
|
||||
d1_pkt.o: ../include/openssl/rsa.h ../include/openssl/safestack.h
|
||||
d1_pkt.o: ../include/openssl/sha.h ../include/openssl/ssl.h
|
||||
d1_pkt.o: ../include/openssl/ssl2.h ../include/openssl/ssl23.h
|
||||
d1_pkt.o: ../include/openssl/ssl3.h ../include/openssl/stack.h
|
||||
d1_pkt.o: ../include/openssl/symhacks.h ../include/openssl/tls1.h
|
||||
d1_pkt.o: ../include/openssl/x509.h ../include/openssl/x509_vfy.h d1_pkt.c
|
||||
d1_pkt.o: ssl_locl.h
|
||||
d1_pkt.o: ../include/openssl/rand.h ../include/openssl/rsa.h
|
||||
d1_pkt.o: ../include/openssl/safestack.h ../include/openssl/sha.h
|
||||
d1_pkt.o: ../include/openssl/ssl.h ../include/openssl/ssl2.h
|
||||
d1_pkt.o: ../include/openssl/ssl23.h ../include/openssl/ssl3.h
|
||||
d1_pkt.o: ../include/openssl/stack.h ../include/openssl/symhacks.h
|
||||
d1_pkt.o: ../include/openssl/tls1.h ../include/openssl/x509.h
|
||||
d1_pkt.o: ../include/openssl/x509_vfy.h d1_pkt.c ssl_locl.h
|
||||
d1_srvr.o: ../e_os.h ../include/openssl/asn1.h ../include/openssl/bio.h
|
||||
d1_srvr.o: ../include/openssl/bn.h ../include/openssl/buffer.h
|
||||
d1_srvr.o: ../include/openssl/comp.h ../include/openssl/crypto.h
|
||||
|
1126
ssl/d1_both.c
1126
ssl/d1_both.c
File diff suppressed because it is too large
Load Diff
@ -1616,6 +1616,7 @@ void ERR_load_SSL_strings(void);
|
||||
#define SSL_F_DTLS1_GET_MESSAGE_FRAGMENT 253
|
||||
#define SSL_F_DTLS1_GET_RECORD 254
|
||||
#define SSL_F_DTLS1_OUTPUT_CERT_CHAIN 255
|
||||
#define SSL_F_DTLS1_PREPROCESS_FRAGMENT 277
|
||||
#define SSL_F_DTLS1_PROCESS_OUT_OF_SEQ_MESSAGE 256
|
||||
#define SSL_F_DTLS1_PROCESS_RECORD 257
|
||||
#define SSL_F_DTLS1_READ_BYTES 258
|
||||
|
@ -87,6 +87,7 @@ static ERR_STRING_DATA SSL_str_functs[]=
|
||||
{ERR_FUNC(SSL_F_DTLS1_GET_MESSAGE_FRAGMENT), "DTLS1_GET_MESSAGE_FRAGMENT"},
|
||||
{ERR_FUNC(SSL_F_DTLS1_GET_RECORD), "DTLS1_GET_RECORD"},
|
||||
{ERR_FUNC(SSL_F_DTLS1_OUTPUT_CERT_CHAIN), "DTLS1_OUTPUT_CERT_CHAIN"},
|
||||
{ERR_FUNC(SSL_F_DTLS1_PREPROCESS_FRAGMENT), "DTLS1_PREPROCESS_FRAGMENT"},
|
||||
{ERR_FUNC(SSL_F_DTLS1_PROCESS_OUT_OF_SEQ_MESSAGE), "DTLS1_PROCESS_OUT_OF_SEQ_MESSAGE"},
|
||||
{ERR_FUNC(SSL_F_DTLS1_PROCESS_RECORD), "DTLS1_PROCESS_RECORD"},
|
||||
{ERR_FUNC(SSL_F_DTLS1_READ_BYTES), "DTLS1_READ_BYTES"},
|
||||
|
Loading…
x
Reference in New Issue
Block a user