]> git.ipfire.org Git - thirdparty/freeradius-server.git/commitdiff
more complaints
authorAlan T. DeKok <aland@freeradius.org>
Thu, 4 Jun 2020 20:45:32 +0000 (16:45 -0400)
committerAlan T. DeKok <aland@freeradius.org>
Wed, 10 Jun 2020 01:32:53 +0000 (21:32 -0400)
src/main/tls.c

index 4b7689d300ca9aa93ba677838a92f9d3a7b3e20f..2db998b2abbd6a3c9a70b97b6f31591643db7206 100644 (file)
@@ -697,7 +697,10 @@ int tls_handshake_recv(REQUEST *request, tls_session_t *ssn)
 {
        int err;
 
-       if (ssn->invalid_hb_used) return 0;
+       if (ssn->invalid_hb_used) {
+               REDEBUG("OpenSSL Heartbeat attack detected.  Closing connection");
+               return 0;
+       }
 
        if (ssn->dirty_in.used > 0) {
                err = BIO_write(ssn->into_ssl, ssn->dirty_in.data, ssn->dirty_in.used);