diff options
author | Dr. Stephen Henson <steve@openssl.org> | 2009-12-01 17:41:42 +0000 |
---|---|---|
committer | Dr. Stephen Henson <steve@openssl.org> | 2009-12-01 17:41:42 +0000 |
commit | d5b8c464991797946aca0f3c5c42ddcd5cd8f7df (patch) | |
tree | 289c95af28f0228620fbcfb0eb002a30cfdb2839 /ssl/d1_both.c | |
parent | 7805e23588be0a8351c0d72a92767fb758f6f9f5 (diff) |
PR: 2115
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Approved by: steve@openssl.org
Add Renegotiation extension to DTLS, fix DTLS ClientHello processing bug.
Diffstat (limited to 'ssl/d1_both.c')
-rw-r--r-- | ssl/d1_both.c | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/ssl/d1_both.c b/ssl/d1_both.c index c1b0720bbf..7ca3405efb 100644 --- a/ssl/d1_both.c +++ b/ssl/d1_both.c @@ -764,6 +764,24 @@ int dtls1_send_finished(SSL *s, int a, int b, const char *sender, int slen) p+=i; l=i; + /* Copy the finished so we can use it for + * renegotiation checks + */ + if(s->type == SSL_ST_CONNECT) + { + OPENSSL_assert(i <= EVP_MAX_MD_SIZE); + memcpy(s->s3->previous_client_finished, + s->s3->tmp.finish_md, i); + s->s3->previous_client_finished_len=i; + } + else + { + OPENSSL_assert(i <= EVP_MAX_MD_SIZE); + memcpy(s->s3->previous_server_finished, + s->s3->tmp.finish_md, i); + s->s3->previous_server_finished_len=i; + } + #ifdef OPENSSL_SYS_WIN16 /* MSVC 1.5 does not clear the top bytes of the word unless * I do this. |