diff options
| author | Frederik Wedel-Heinen <[email protected]> | 2025-01-17 09:05:59 +0100 |
|---|---|---|
| committer | Matt Caswell <[email protected]> | 2026-08-25 13:41:24 +0200 |
| commit | 89e2929d700c89fa9096f0ed5bc00f3ff107e6c5 (patch) | |
| tree | 7ab87a530ecf020c3e8ed5972e43daf7e63b2e4e /include | |
| parent | Sequence number cipher context is NULL for TLS connections (diff) | |
| download | openssl-89e2929d700c89fa9096f0ed5bc00f3ff107e6c5.tar.gz openssl-89e2929d700c89fa9096f0ed5bc00f3ff107e6c5.zip | |
This change fixes an issue where a DTLS 1.3 would calculate a wrong transcript hash.
A wrong transcript hash was calculated when the client received a HRR which caused interop failures with WolfSSL. This change also refactors the internal calls to ssl3_finish_mac() that no longer requires the "incl_hdr" argument.
Reviewed-by: Viktor Dukhovni <[email protected]>
Reviewed-by: Tomas Mraz <[email protected]>
(Merged from https://github.com/openssl/openssl/pull/26465)
Diffstat (limited to 'include')
| -rw-r--r-- | include/openssl/prov_ssl.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/include/openssl/prov_ssl.h b/include/openssl/prov_ssl.h index 17f2bf6b6ce..d30f1160d96 100644 --- a/include/openssl/prov_ssl.h +++ b/include/openssl/prov_ssl.h @@ -30,6 +30,8 @@ extern "C" { #define DTLS1_3_VERSION 0xFEFC #define DTLS1_BAD_VER 0x0100 +#define PROTO_VERSION_UNSET 0 + /* QUIC uses a 4 byte unsigned version number */ #define OSSL_QUIC1_VERSION 0x0000001 |