]> git.ipfire.org Git - thirdparty/openssl.git/commit
Reject invalid FFDHE and ECDHE key shares with SSL_AD_ILLEGAL_PARAMETER alert
authorcx <1249843194@qq.com>
Thu, 26 Sep 2024 03:27:14 +0000 (11:27 +0800)
committerTomas Mraz <tomas@openssl.org>
Thu, 2 Jan 2025 13:17:19 +0000 (14:17 +0100)
commitb618bebca7a74f92fe6e07767e76d0029d1ed3cf
treed36bddfc2afc68d87b8b21885a9e869219dfa902
parent91cbe80409486ca3ff4a1969569fb1e774ce1f27
Reject invalid FFDHE and ECDHE key shares with SSL_AD_ILLEGAL_PARAMETER alert

This changes the alert according to RFC 8446.

Fixes: #25402
Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/25547)

(cherry picked from commit 0f6caf740977fa25d0f05cd3c48a656efbd9a79e)
ssl/statem/statem_srvr.c