1. 24 1月, 2019 1 次提交
    • M
      Make sure we trigger retransmits in DTLS testing · f9ad0abb
      Matt Caswell 提交于
      During a DTLS handshake we may need to periodically handle timeouts in the
      DTLS timer to ensure retransmits due to lost packets are performed. However,
      one peer will always complete a handshake before the other. The DTLS timer
      stops once the handshake has finished so any handshake messages lost after
      that point will not automatically get retransmitted simply by calling
      DTLSv1_handle_timeout(). However attempting an SSL_read implies a
      DTLSv1_handle_timeout() and additionally will process records received from
      the peer. If those records are themselves retransmits then we know that the
      peer has not completed its handshake yet and a retransmit of our final
      flight automatically occurs.
      Reviewed-by: NPaul Dale <paul.dale@oracle.com>
      (Merged from https://github.com/openssl/openssl/pull/8047)
      
      (cherry picked from commit 80c455d5ae405e855391e298a2bf8a24629dd95d)
      f9ad0abb
  2. 22 1月, 2019 1 次提交
  3. 21 1月, 2019 3 次提交
  4. 17 1月, 2019 3 次提交
  5. 16 1月, 2019 1 次提交
  6. 15 1月, 2019 4 次提交
  7. 09 1月, 2019 1 次提交
    • M
      Don't artificially limit the size of the ClientHello · bbcfd60e
      Matt Caswell 提交于
      We were setting a limit of SSL3_RT_MAX_PLAIN_LENGTH on the size of the
      ClientHello. AFAIK there is nothing in the standards that requires this
      limit.
      
      The limit goes all the way back to when support for extensions was first
      added for TLSv1.0. It got converted into a WPACKET max size in 1.1.1. Most
      likely it was originally added to avoid the complexity of having to grow
      the init_buf in the middle of adding extensions. With WPACKET this is
      irrelevant since it will grow automatically.
      
      This issue came up when an attempt was made to send a very large
      certificate_authorities extension in the ClientHello.
      
      We should just remove the limit.
      Reviewed-by: NPaul Dale <paul.dale@oracle.com>
      Reviewed-by: NViktor Dukhovni <viktor@openssl.org>
      (Merged from https://github.com/openssl/openssl/pull/7424)
      
      (cherry picked from commit 7835e97b6ff5cd94a10c5aeac439f4aa145a77b2)
      bbcfd60e
  8. 08 1月, 2019 3 次提交
  9. 07 1月, 2019 3 次提交
  10. 06 1月, 2019 2 次提交
  11. 05 1月, 2019 7 次提交
  12. 03 1月, 2019 3 次提交
  13. 31 12月, 2018 2 次提交
  14. 29 12月, 2018 1 次提交
  15. 28 12月, 2018 1 次提交
  16. 23 12月, 2018 4 次提交