diff options
| author | Matt Caswell <matt@openssl.org> | 2019-02-21 16:02:24 +0000 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2019-02-22 18:30:05 +0000 |
| commit | f6d64b5142ab59be47c1f10512ce6d58fb399131 (patch) | |
| tree | 812995d8a3c161046387a6c4738db3de8779981e /ms | |
| parent | 4a81b8b6e8b908ff70d675c7173ad4923f3dc659 (diff) | |
Don't restrict the number of KeyUpdate messages we can process
Prior to this commit we were keeping a count of how many KeyUpdates we
have processed and failing if we had had too many. This simplistic approach
is not sufficient for long running connections. Since many KeyUpdates
would not be a particular good DoS route anyway, the simplest solution is
to simply remove the key update count.
Fixes #8068
Reviewed-by: Kurt Roeckx <kurt@roeckx.be>
(Merged from https://github.com/openssl/openssl/pull/8299)
(cherry picked from commit 3409a5ff8a44ddaf043d83ed22e657ae871be289)
Diffstat (limited to 'ms')
0 files changed, 0 insertions, 0 deletions