openssl/ssl
Matt Caswell 436a2a0179 Fail if an unrecognised record type is received
TLS1.0 and TLS1.1 say you SHOULD ignore unrecognised record types, but
TLS 1.2 says you MUST send an unexpected message alert. We swap to the
TLS 1.2 behaviour for all protocol versions to prevent issues where no
progress is being made and the peer continually sends unrecognised record
types, using up resources processing them.

Issue reported by 郭志攀

Reviewed-by: Tim Hudson <tjh@openssl.org>
2016-11-02 23:22:48 +00:00
..
record Fail if an unrecognised record type is received 2016-11-02 23:22:48 +00:00
statem Add the SSL_METHOD for TLSv1.3 and all other base changes required 2016-11-02 13:08:21 +00:00
bio_ssl.c Tweaks based on review feedback of BIO size_t work 2016-10-28 09:48:54 +01:00
build.info First pass at writing a writeable packets API 2016-09-13 09:41:21 +01:00
d1_lib.c Add DTLS_get_data_mtu() function 2016-11-02 14:00:10 +00:00
d1_msg.c Whitespace cleanup in ssl folder 2016-06-29 09:56:39 -04:00
d1_srtp.c Convert ServerHello construction to WPACKET 2016-09-29 10:06:46 +01:00
methods.c Add the SSL_METHOD for TLSv1.3 and all other base changes required 2016-11-02 13:08:21 +00:00
packet.c Remove trailing whitespace from some files. 2016-10-10 23:36:21 +01:00
packet_locl.h Remove trailing whitespace from some files. 2016-10-10 23:36:21 +01:00
pqueue.c Copyright consolidation 01/10 2016-05-17 14:19:19 -04:00
s3_cbc.c Indent ssl/ 2016-08-18 14:02:29 +02:00
s3_enc.c Indent ssl/ 2016-08-18 14:02:29 +02:00
s3_lib.c Add the SSL_METHOD for TLSv1.3 and all other base changes required 2016-11-02 13:08:21 +00:00
s3_msg.c Indent ssl/ 2016-08-18 14:02:29 +02:00
ssl_asn1.c Indent ssl/ 2016-08-18 14:02:29 +02:00
ssl_cert.c Style tweaks following review feedback 2016-09-20 10:16:56 +01:00
ssl_ciph.c Add DTLS_get_data_mtu() function 2016-11-02 14:00:10 +00:00
ssl_conf.c Add the SSL_METHOD for TLSv1.3 and all other base changes required 2016-11-02 13:08:21 +00:00
ssl_err.c Don't set the handshake header in every message 2016-10-03 16:25:48 +01:00
ssl_init.c Indent ssl/ 2016-08-18 14:02:29 +02:00
ssl_lib.c Convert a big "if" into a "switch" 2016-11-02 13:08:21 +00:00
ssl_locl.h Add DTLS_get_data_mtu() function 2016-11-02 14:00:10 +00:00
ssl_mcnf.c Indent ssl/ 2016-08-18 14:02:29 +02:00
ssl_rsa.c Indent ssl/ 2016-08-18 14:02:29 +02:00
ssl_sess.c Add the SSL_METHOD for TLSv1.3 and all other base changes required 2016-11-02 13:08:21 +00:00
ssl_stat.c Add missing debug strings. 2016-09-07 16:08:38 -04:00
ssl_txt.c Indent ssl/ 2016-08-18 14:02:29 +02:00
ssl_utst.c Copyright consolidation 01/10 2016-05-17 14:19:19 -04:00
t1_enc.c Indent ssl/ 2016-08-18 14:02:29 +02:00
t1_ext.c Delete some unneeded code 2016-09-29 10:06:46 +01:00
t1_lib.c Add the SSL_METHOD for TLSv1.3 and all other base changes required 2016-11-02 13:08:21 +00:00
t1_reneg.c Convert ServerHello construction to WPACKET 2016-09-29 10:06:46 +01:00
t1_trce.c Add the SSL_METHOD for TLSv1.3 and all other base changes required 2016-11-02 13:08:21 +00:00
tls_srp.c Indent ssl/ 2016-08-18 14:02:29 +02:00