diff options
| author | Matt Caswell <matt@openssl.org> | 2017-03-13 15:21:15 +0000 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2017-03-16 14:20:38 +0000 |
| commit | 11c67eeaf4dd0376d84a90590e307d5d2e12f025 (patch) | |
| tree | 3e7903a8c70b6ad63d33be996548251ce439014f /ssl/ssl_err.c | |
| parent | 9e0ac6a2f1237ab72f0f26a032199864c7b71f2e (diff) | |
HelloRetryRequest updates for draft-19
Draft-19 changes the HRR transcript hash so that the initial ClientHello
is replaced in the transcript with a special synthetic message_hash message
that just contains a hash of ClientHello1 as its message body.
Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2895)
Diffstat (limited to 'ssl/ssl_err.c')
| -rw-r--r-- | ssl/ssl_err.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/ssl/ssl_err.c b/ssl/ssl_err.c index c476b1e7e0..f7ee171602 100644 --- a/ssl/ssl_err.c +++ b/ssl/ssl_err.c @@ -23,6 +23,8 @@ static ERR_STRING_DATA SSL_str_functs[] = { {ERR_FUNC(SSL_F_ADD_KEY_SHARE), "add_key_share"}, {ERR_FUNC(SSL_F_BYTES_TO_CIPHER_LIST), "bytes_to_cipher_list"}, {ERR_FUNC(SSL_F_CHECK_SUITEB_CIPHER_LIST), "check_suiteb_cipher_list"}, + {ERR_FUNC(SSL_F_CREATE_SYNTHETIC_MESSAGE_HASH), + "create_synthetic_message_hash"}, {ERR_FUNC(SSL_F_CT_MOVE_SCTS), "ct_move_scts"}, {ERR_FUNC(SSL_F_CT_STRICT), "ct_strict"}, {ERR_FUNC(SSL_F_D2I_SSL_SESSION), "d2i_SSL_SESSION"}, @@ -74,6 +76,7 @@ static ERR_STRING_DATA SSL_str_functs[] = { "ossl_statem_server_read_transition"}, {ERR_FUNC(SSL_F_PROCESS_KEY_SHARE_EXT), "process_key_share_ext"}, {ERR_FUNC(SSL_F_READ_STATE_MACHINE), "read_state_machine"}, + {ERR_FUNC(SSL_F_SET_CLIENT_CIPHERSUITE), "set_client_ciphersuite"}, {ERR_FUNC(SSL_F_SSL3_CHANGE_CIPHER_STATE), "ssl3_change_cipher_state"}, {ERR_FUNC(SSL_F_SSL3_CHECK_CERT_AND_ALGORITHM), "ssl3_check_cert_and_algorithm"}, @@ -481,6 +484,7 @@ static ERR_STRING_DATA SSL_str_reasons[] = { {ERR_REASON(SSL_R_AT_LEAST_TLS_1_2_NEEDED_IN_SUITEB_MODE), "at least (D)TLS 1.2 needed in Suite B mode"}, {ERR_REASON(SSL_R_BAD_CHANGE_CIPHER_SPEC), "bad change cipher spec"}, + {ERR_REASON(SSL_R_BAD_CIPHER), "bad cipher"}, {ERR_REASON(SSL_R_BAD_DATA), "bad data"}, {ERR_REASON(SSL_R_BAD_DATA_RETURNED_BY_CALLBACK), "bad data returned by callback"}, |