diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2014-05-16 12:49:48 +0100 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2014-06-05 13:24:46 +0100 |
| commit | 77719aefb8f549ccc7f04222174889615d62057b (patch) | |
| tree | 9a9d993acb8c565a8a730e2cee79072c0bdb5a13 /ssl/ssl3.h | |
| parent | 9d2c9dd1e1a452939a733b638d180bb308ce72a9 (diff) | |
Fix for CVE-2014-0224
Only accept change cipher spec when it is expected instead of at any
time. This prevents premature setting of session keys before the master
secret is determined which an attacker could use as a MITM attack.
Thanks to KIKUCHI Masashi (Lepidum Co. Ltd.) for reporting this issue
and providing the initial fix this patch is based on.
(cherry picked from commit bc8923b1ec9c467755cd86f7848c50ee8812e441)
Diffstat (limited to 'ssl/ssl3.h')
| -rw-r--r-- | ssl/ssl3.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/ssl/ssl3.h b/ssl/ssl3.h index ef20aa6c73..bc0986d688 100644 --- a/ssl/ssl3.h +++ b/ssl/ssl3.h @@ -407,6 +407,7 @@ typedef struct ssl3_buffer_st #define TLS1_FLAGS_TLS_PADDING_BUG 0x0008 #define TLS1_FLAGS_SKIP_CERT_VERIFY 0x0010 #define TLS1_FLAGS_KEEP_HANDSHAKE 0x0020 +#define SSL3_FLAGS_CCS_OK 0x0080 /* SSL3_FLAGS_SGC_RESTART_DONE is set when we * restart a handshake because of MS SGC and so prevents us |