diff options
author | Dr. Stephen Henson <steve@openssl.org> | 2014-04-05 20:43:54 +0100 |
---|---|---|
committer | Dr. Stephen Henson <steve@openssl.org> | 2014-04-05 20:49:09 +0100 |
commit | 6411b83e52fdfd0d3563d50a4dc00838b142fb2c (patch) | |
tree | dddb72dc460d9396fa61a7160b7a94c4aaae99b9 /CHANGES | |
parent | bb98beade96739f7cda7d4ca44743532cd3a33be (diff) |
Set TLS padding extension value.
Enable TLS padding extension using official value from:
http://www.iana.org/assignments/tls-extensiontype-values/tls-extensiontype-values.xhtml
(cherry picked from commit cd6bd5ffda616822b52104fee0c4c7d623fd4f53)
Conflicts:
CHANGES
Diffstat (limited to 'CHANGES')
-rw-r--r-- | CHANGES | 12 |
1 files changed, 1 insertions, 11 deletions
@@ -17,23 +17,13 @@ this fixes a limiation in previous versions of OpenSSL. [Steve Henson] - *) TLS pad extension: draft-agl-tls-padding-02 + *) TLS pad extension: draft-agl-tls-padding-03 Workaround for the "TLS hang bug" (see FAQ and PR#2771): if the TLS client Hello record length value would otherwise be > 255 and less that 512 pad with a dummy extension containing zeroes so it is at least 512 bytes long. - To enable it use an unused extension number (for example chrome uses - 35655) using: - - e.g. -DTLSEXT_TYPE_padding=35655 - - Since the extension is ignored the actual number doesn't matter as long - as it doesn't clash with any existing extension. - - This will be updated when the extension gets an official number. - [Adam Langley, Steve Henson] *) Extended RSA OAEP support via EVP_PKEY API. Options to specify digest, |