]> git.ipfire.org Git - thirdparty/openssl.git/commit
projects / thirdparty / openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c882abd) | patch
Keep old method in case of an unsupported protocol
authorKurt Roeckx <kurt@roeckx.be>
Tue, 21 Oct 2014 18:45:15 +0000 (20:45 +0200)
committerKurt Roeckx <kurt@roeckx.be>
Tue, 21 Oct 2014 18:45:15 +0000 (20:45 +0200)
commit392fa7a952e97d82eac6958c81ed1e256e6b8ca5
treeda4cd91616180a8c545e3bf9ed5777a00660856atree | snapshot
parentc882abd52269a59ed8e0510e5febf667428ece85commit | diff
Keep old method in case of an unsupported protocol

When we're configured with no-ssl3 and we receive an SSL v3 Client Hello, we set
the method to NULL.  We didn't used to do that, and it breaks things.  This is a
regression introduced in 62f45cc27d07187b59551e4fad3db4e52ea73f2c.  Keep the old
method since the code is not able to deal with a NULL method at this time.

CVE-2014-3569, PR#3571

Reviewed-by: Emilia Käsper <emilia@openssl.org>
ssl/s23_srvr.c diff | blob | blame | history
Mirror of https://github.com/openssl/openssl.git