David Woodhouse f7683aaf36 Wrong SSL version in DTLS1_BAD_VER ClientHello ...

Since commit 741c9959 ("DTLS revision."), we put the wrong protocol
version into our ClientHello for DTLS1_BAD_VER. The old DTLS
code which used ssl->version was replaced by the more generic SSL3 code
which uses ssl->client_version. The Cisco ASA no longer likes our
ClientHello.

RT#3711

Reviewed-by: Rich Salz <rsalz@openssl.org>

2015-03-09 11:04:39 +00:00

..

bio_ssl.c

dead code cleanup: #if 0 in ssl

2015-02-06 10:52:12 -05:00

d1_both.c

Fix DTLS1_BAD_VER regression

2015-03-09 10:51:57 +00:00

d1_clnt.c

dead code cleanup: #if 0 in ssl

2015-02-06 10:52:12 -05:00

d1_lib.c

Wrong SSL version in DTLS1_BAD_VER ClientHello

2015-03-09 11:04:39 +00:00

d1_meth.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

d1_pkt.c

Use constants not numbers

2015-03-05 09:25:53 +00:00

d1_srtp.c

dead code cleanup: #if 0 in ssl

2015-02-06 10:52:12 -05:00

d1_srvr.c

Remove NETSCAPE_HANG_BUG

2015-02-26 23:27:09 +00:00

dtls1.h

Fix d2i_SSL_SESSION for DTLS1_BAD_VER

2015-02-27 20:29:03 +00:00

heartbeat_test.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

install-ssl.com

Install srtp.h

2012-07-05 13:20:19 +00:00

kssl_lcl.h

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

kssl.c

dead code cleanup: #if 0 in ssl

2015-02-06 10:52:12 -05:00

kssl.h

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

Makefile

RT478: Add uninstall make target

2015-01-12 10:28:05 -05:00

s3_both.c

OPENSSL_NO_XXX cleanup: OPENSSL_NO_BUF_FREELISTS

2015-01-27 16:43:53 -05:00

s3_cbc.c

OPENSSL_NO_xxx cleanup: SHA

2015-01-27 12:34:45 -05:00

s3_clnt.c

dead code cleanup: #if 0 in ssl

2015-02-06 10:52:12 -05:00

s3_enc.c

More comment realignment

2015-01-22 09:20:10 +00:00

s3_lib.c

Remove experimental 56bit export ciphers

2015-03-01 16:18:16 -05:00

s3_meth.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

s3_pkt.c

Use constants not numbers

2015-03-05 09:25:53 +00:00

s3_srvr.c

Fix missing return value checks.

2015-02-27 15:09:02 +00:00

s23_clnt.c

dead code cleanup: #if 0 in ssl

2015-02-06 10:52:12 -05:00

s23_lib.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

s23_meth.c

OPENSSL_NO_XXX cleanup: NO_TLS, NO_TLS1

2015-01-27 15:14:12 -05:00

s23_pkt.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

s23_srvr.c

dead code cleanup: #if 0 in ssl

2015-02-06 10:52:12 -05:00

srtp.h

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

ssl2.h

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

ssl3.h

Make libssl opaque. Move all structures that were previously protected by

2015-01-31 18:06:45 +00:00

ssl23.h

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

ssl_algs.c

OPENSSL_NO_xxx cleanup: SHA

2015-01-27 12:34:45 -05:00

ssl_asn1.c

Fix d2i_SSL_SESSION for DTLS1_BAD_VER

2015-02-27 20:29:03 +00:00

ssl_cert.c

dead code cleanup: #if 0 in ssl

2015-02-06 10:52:12 -05:00

ssl_ciph.c

Re-align some comments after running the reformat script.

2015-01-22 09:20:10 +00:00

ssl_conf.c

Fix segfault with empty fields as last in the config.

2015-01-24 14:46:50 +01:00

ssl_err2.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

ssl_err.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

ssl_lib.c

Apache Traffic Server has a need to set the rbio without touching the wbio.

2015-02-07 14:29:16 +00:00

ssl_locl.h

Make tlsext_tick_lifetime_hint an unsigned long (from signed long).

2015-02-10 22:53:24 +00:00

ssl_rsa.c

clang on Linux x86_64 complains about unreachable code.

2015-01-29 01:54:09 +01:00

ssl_sess.c

Add SSL_SESSION_get0_ticket API function.

2015-02-10 22:54:27 +00:00

ssl_stat.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

ssl_task.c

Make the libssl opaque changes compile on VMS

2015-01-31 18:07:32 +00:00

ssl_txt.c

Extended master secret extension support.

2015-02-03 14:50:07 +00:00

ssl_utst.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

ssl-lib.com

VMS adjustments:

2015-01-30 14:43:57 +01:00

ssl.h

Removed support for SSL_OP_NETSCAPE_DEMO_CIPHER_CHANGE_BUG. Also removed

2015-02-26 23:22:46 +00:00

ssltest.c

Don't set no_protocol if -tls1 selected.

2015-02-24 02:28:23 +00:00

t1_clnt.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

t1_enc.c

Fixed missing return value checks.

2015-02-27 15:09:28 +00:00

t1_ext.c

Remove support for opaque-prf

2015-01-28 15:37:16 -05:00

t1_lib.c

dead code cleanup: #if 0 in ssl

2015-02-06 10:52:12 -05:00

t1_meth.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

t1_reneg.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

t1_srvr.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

t1_trce.c

dead code cleanup: #if 0 in ssl

2015-02-06 10:52:12 -05:00

tls1.h

Remove experimental 56bit export ciphers

2015-03-01 16:18:16 -05:00

tls_srp.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00