]> git.ipfire.org Git - thirdparty/asterisk.git/commit
iostream.c: Handle TLS handshake attacks in order to resolve the issue of exceeding...
authorTinet-mucw <mucw@ti-net.com.cn>
Mon, 27 Oct 2025 05:57:32 +0000 (22:57 -0700)
committergithub-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Tue, 28 Oct 2025 12:44:32 +0000 (12:44 +0000)
commitb026fb80bdc790d67d18a2e34a146e279c6c4653
tree031d410024266fedce11f388ad1c88e0604a4d65
parentdb7988e540b8259363e0630411cc9e5045c92ab3
iostream.c: Handle TLS handshake attacks in order to resolve the issue of exceeding the maximum number of HTTPS sessions.

The TCP three-way handshake completes, but if the server is under a TLS handshake attack, asterisk will get stuck at SSL_do_handshake().
In this case, a timeout mechanism should be set for the SSL/TLS handshake process to prevent indefinite waiting during the SSL handshake.

Resolves: #1559
main/iostream.c