Does openssl sanity check ALPN strings?

Hal Murray hmurray at megapathdsl.net
Wed Jun 26 23:25:08 UTC 2019


If a client passes {99, "a", "z" } with a length of 3 to 
SSL_CTX_set_alpn_protos,
does that get rejected or sent to the server?

If a somebody sends that to a server, does it get passed to the alpn callback?


-- 
These are my opinions.  I hate spam.





More information about the openssl-users mailing list