1. 28 9月, 2006 1 次提交
    • R
      Fixes for the following claims: · cbb92dfa
      Richard Levitte 提交于
        1) Certificate Message with no certs
      
        OpenSSL implementation sends the Certificate message during SSL
        handshake, however as per the specification, these have been omitted.
      
        -- RFC 2712 --
           CertificateRequest, and the ServerKeyExchange shown in Figure 1
           will be omitted since authentication and the establishment of a
           master secret will be done using the client's Kerberos credentials
           for the TLS server.  The client's certificate will be omitted for
           the same reason.
        -- RFC 2712 --
      
        3) Pre-master secret Protocol version
      
        The pre-master secret generated by OpenSSL does not have the correct
        client version.
      
        RFC 2712 says, if the Kerberos option is selected, the pre-master
        secret structure is the same as that used in the RSA case.
      
        TLS specification defines pre-master secret as:
               struct {
                   ProtocolVersion client_version;
                   opaque random[46];
               } PreMasterSecret;
      
        where client_version is the latest protocol version supported by the
        client
      
        The pre-master secret generated by OpenSSL does not have the correct
        client version. The implementation does not update the first 2 bytes
        of random secret for Kerberos Cipher suites. At the server-end, the
        client version from the pre-master secret is not validated.
      
      PR: 1336
      cbb92dfa
  2. 26 9月, 2006 1 次提交
  3. 25 9月, 2006 1 次提交
  4. 24 9月, 2006 1 次提交
  5. 23 9月, 2006 2 次提交
  6. 22 9月, 2006 2 次提交
  7. 21 9月, 2006 6 次提交
  8. 19 9月, 2006 5 次提交
  9. 18 9月, 2006 2 次提交
  10. 17 9月, 2006 1 次提交
  11. 15 9月, 2006 1 次提交
  12. 13 9月, 2006 1 次提交
  13. 12 9月, 2006 1 次提交
  14. 11 9月, 2006 2 次提交
  15. 10 9月, 2006 1 次提交
  16. 08 9月, 2006 1 次提交
  17. 06 9月, 2006 6 次提交
  18. 05 9月, 2006 1 次提交
  19. 01 9月, 2006 4 次提交