]> git.ipfire.org Git - thirdparty/curl.git/commit
schannel: improve handshake procedure
authorJay Satiro <raysatiro@yahoo.com>
Wed, 20 Aug 2025 06:10:53 +0000 (02:10 -0400)
committerJay Satiro <raysatiro@yahoo.com>
Fri, 22 Aug 2025 05:50:28 +0000 (01:50 -0400)
commitb6a5f672597a06bdf4361a2e70bb53c6f097105f
tree41f45755a39d5b42563f07047806bfa6caa5d76b
parent7d5f535ca722c32699484751c37f9883f02358b3
schannel: improve handshake procedure

- During handshake, do not require reading more data if unprocessed
  encrypted data that may be a complete TLS record is already available.

- During handshake, check that the socket is writeable before processing
  encrypted data that may require an immediate reply to the server.

These two fixes are for issues that were found during renegotiation
testing but could affect any handshake.

Prior to this change it was possible in some abnormal network conditions
for the Schannel TLS handshake procedure to erroneously wait or error.

Ref: https://github.com/curl/curl/pull/18125

Closes https://github.com/curl/curl/pull/18323
lib/vtls/schannel.c