]> git.ipfire.org Git - thirdparty/openssl.git/commit
Reject invalid FFDHE and ECDHE key shares with SSL_AD_ILLEGAL_PARAMETER alert
authorcx <1249843194@qq.com>
Thu, 26 Sep 2024 03:27:14 +0000 (11:27 +0800)
committerTomas Mraz <tomas@openssl.org>
Thu, 2 Jan 2025 13:17:33 +0000 (14:17 +0100)
commitbe7893a4219575db59c1e5102582853912215541
tree83fd77432362e93696168f0c2ef3e5e58e258740
parentadd0facc81261f2de97a6a4b487a7d0d6a1737bf
Reject invalid FFDHE and ECDHE key shares with SSL_AD_ILLEGAL_PARAMETER alert

This changes the alert according to RFC 8446.

Fixes: #25402
Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/25547)

(cherry picked from commit 0f6caf740977fa25d0f05cd3c48a656efbd9a79e)
ssl/statem/statem_srvr.c