5e8abac86f
Un-reverts the previous update commit and forward-ports the patch to improve legacy SSLv2 handshake handling. Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 38609
13 lines
541 B
Diff
13 lines
541 B
Diff
--- a/src/internal.c
|
|
+++ b/src/internal.c
|
|
@@ -4622,6 +4622,10 @@
|
|
b1 =
|
|
ssl->buffers.inputBuffer.buffer[ssl->buffers.inputBuffer.idx++];
|
|
ssl->curSize = ((b0 & 0x7f) << 8) | b1;
|
|
+
|
|
+ /* does not appear to a be a SSLv2 client hello */
|
|
+ if ( ssl->buffers.inputBuffer.buffer[ssl->buffers.inputBuffer.idx] != 1 )
|
|
+ return UNKNOWN_HANDSHAKE_TYPE;
|
|
}
|
|
else {
|
|
ssl->options.processReply = getRecordLayerHeader;
|