diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2011-11-25 00:18:10 +0000 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2011-11-25 00:18:10 +0000 |
| commit | 2c7d978c2d4db664d1c5d164685480eed818d281 (patch) | |
| tree | c61562b448898555f5f964e86cf62d5a0fc6a805 /ssl/tls_srp.c | |
| parent | 8cd897a42c973ed3a76ef1946f0d9eda1b6b12ec (diff) | |
PR: 1794
Submitted by: Peter Sylvester <peter.sylvester@edelweb.fr>
Reviewed by: steve
Make SRP conformant to rfc 5054.
Changes are:
- removal of the addition state after client hello
- removal of all pre-rfc srp alert ids
- sending a fatal alert when there is no srp extension but when the
server wants SRP
- removal of unnecessary code in the client.
Diffstat (limited to 'ssl/tls_srp.c')
| -rw-r--r-- | ssl/tls_srp.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/ssl/tls_srp.c b/ssl/tls_srp.c index 6d78c49ea0..433d286d3d 100644 --- a/ssl/tls_srp.c +++ b/ssl/tls_srp.c @@ -234,7 +234,7 @@ int SSL_srp_server_param_with_username(SSL *s, int *ad) unsigned char b[SSL_MAX_MASTER_KEY_LENGTH]; int al; - *ad = SSL_AD_UNKNOWN_SRP_USERNAME; + *ad = SSL_AD_UNKNOWN_PSK_IDENTITY; if ((s->srp_ctx.TLS_ext_srp_username_callback !=NULL) && ((al = s->srp_ctx.TLS_ext_srp_username_callback(s, ad, s->srp_ctx.SRP_cb_arg))!=SSL_ERROR_NONE)) return al; |