]> git.ipfire.org Git - thirdparty/openssl.git/commit
Ensure client read app data secret change occurs after write for QUIC
authorMatt Caswell <matt@openssl.org>
Thu, 29 May 2025 11:52:35 +0000 (12:52 +0100)
committerMatt Caswell <matt@openssl.org>
Tue, 3 Jun 2025 16:06:31 +0000 (17:06 +0100)
commit098cfd216b9b54106cbf9338a511c7dda972b8c1
tree7c4da735d998838ea0b85c9e1ff5ae0601ed8756
parentc7f9c4d7d184cec988251b2a9c697302774fbe77
Ensure client read app data secret change occurs after write for QUIC

We don't want read secrets to be issue before write for QUIC, because
we want to avoid the situation where we want to ack something we've read
but we don't have the write secret yet.

Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27732)
ssl/statem/statem_clnt.c
ssl/statem/statem_lib.c
ssl/tls13_enc.c