diff options
author | Lutz Jänicke <jaenicke@openssl.org> | 2002-12-29 20:59:35 +0000 |
---|---|---|
committer | Lutz Jänicke <jaenicke@openssl.org> | 2002-12-29 20:59:35 +0000 |
commit | 21cde7a41c3a365629b0c9d24bb7d86ea5a5a405 (patch) | |
tree | 6deb46d1ba3e76af34d90c8c5f81d258f224b76e /CHANGES | |
parent | 85982899368cbb0cf561fd24700de3041ff700e1 (diff) |
Fix wrong handling of session ID in SSLv2 client code.
PR: 377
Diffstat (limited to 'CHANGES')
-rw-r--r-- | CHANGES | 9 |
1 files changed, 9 insertions, 0 deletions
@@ -352,6 +352,15 @@ TODO: bug: pad x with leading zeros if necessary Changes between 0.9.6h and 0.9.7 [XX xxx 2002] + *) Fix session ID handling in SSLv2 client code: the SERVER FINISHED + code (06) was taken as the first octet of the session ID and the last + octet was ignored consequently. As a result SSLv2 client side session + caching could not have worked due to the session ID mismatch between + client and server. + Behaviour observed by Crispin Flowerday <crispin@flowerday.cx> as + PR #377. + [Lutz Jaenicke] + *) Change the declaration of needed Kerberos libraries to use EX_LIBS instead of the special (and badly supported) LIBKRB5. LIBKRB5 is removed entirely. |