[openssl-commits] Broken: openssl/openssl#15551 (OpenSSL_1_1_0-stable - 32859f6)

[Travis CI]

Build Update for openssl/openssl
-------------------------------------

Build: #15551
Status: Broken

Duration: 15 minutes and 42 seconds
Commit: 32859f6 (OpenSSL_1_1_0-stable)
Author: Matt Caswell
Message: Tolerate DTLS alerts with an incorrect version number

In the case of a protocol version alert being sent by a peer the record
version number may not be what we are expecting. In DTLS records with an
unexpected version number are silently discarded. This probably isn't
appropriate for alerts, so we tolerate a mismatch in the minor version
number.

This resolves an issue reported on openssl-users where an OpenSSL server
chose DTLS1.0 but the client was DTLS1.2 only and sent a protocol_version
alert with a 1.2 record number. This was silently ignored by the server.

Reviewed-by: Viktor Dukhovni <viktor at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5018)

(cherry picked from commit 08455bc9b0e69ed5f25c16fc30cc2db57cdca842)

View the changeset: https://github.com/openssl/openssl/compare/bda1af6d5f6f...32859f608c2f

View the full build log and details: https://travis-ci.org/openssl/openssl/builds/327014242?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-commits/attachments/20180109/391b2638/attachment.html>