diff options
author | Dr. Stephen Henson <steve@openssl.org> | 2013-12-12 03:21:06 +0000 |
---|---|---|
committer | Dr. Stephen Henson <steve@openssl.org> | 2013-12-13 15:39:55 +0000 |
commit | 4fcdd66fff5fea0cfa1055c6680a76a4303f28a2 (patch) | |
tree | 6ee4eaa0d5d9e692fc037fc784de15d12b072a63 /CHANGES | |
parent | 102302b05b2ea9c46a29be8a1451b7d1d6e3aa78 (diff) |
Update to pad extension.
Fix padding calculation for different SSL_METHOD types. Use the
standard name as used in draft-agl-tls-padding-02
Diffstat (limited to 'CHANGES')
-rw-r--r-- | CHANGES | 32 |
1 files changed, 19 insertions, 13 deletions
@@ -4,19 +4,6 @@ Changes between 1.0.2 and 1.1.0 [xx XXX xxxx] - *) Experimental workaround TLS filler (WTF) extension. Based on a suggested - workaround for the "TLS hang bug" (see FAQ and PR#2771): if the TLS client - Hello record length value would otherwise be > 255 and less that 512 - pad with a dummy extension containing zeroes so it is at least 512 bytes - long. - - To enable it use an unused extension number (for example 0x4242) using - e.g. -DTLSEXT_TYPE_wtf=0x4242 - - WARNING: EXPERIMENTAL, SUBJECT TO CHANGE. - - [Steve Henson] - *) Experimental encrypt-then-mac support. Experimental support for encrypt then mac from @@ -286,6 +273,25 @@ Changes between 1.0.1e and 1.0.2 [xx XXX xxxx] + *) TLS pad extension: draft-agl-tls-padding-02 + + Workaround for the "TLS hang bug" (see FAQ and PR#2771): if the + TLS client Hello record length value would otherwise be > 255 and + less that 512 pad with a dummy extension containing zeroes so it + is at least 512 bytes long. + + To enable it use an unused extension number (for example chrome uses + 35655) using: + + e.g. -DTLSEXT_TYPE_padding=35655 + + Since the extension is ignored the actual number doesn't matter as long + as it doesn't clash with any existing extension. + + This will be updated when the extension gets an official number. + + [Adam Langley, Steve Henson] + *) Add functions to allocate and set the fields of an ECDSA_METHOD structure. [Douglas E. Engert, Steve Henson] |