[openssl/openssl] 1eef26: Do not send the empty renegotiation info SCSV in QUIC

Tomáš Mráz noreply at github.com
Tue May 2 07:53:47 UTC 2023


  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 1eef26bd8924058b9ba0e52786b6afab80db23a9
      https://github.com/openssl/openssl/commit/1eef26bd8924058b9ba0e52786b6afab80db23a9
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2023-05-02 (Tue, 02 May 2023)

  Changed paths:
    M ssl/statem/statem_clnt.c

  Log Message:
  -----------
  Do not send the empty renegotiation info SCSV in QUIC

There is no point in sending that when min_proto_version is >= TLS1_3_VERSION.
So we set that during SSL_CTX initialization and skip adding the SCSV.

Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Todd Short <todd.short at me.com>
(Merged from https://github.com/openssl/openssl/pull/20764)


  Commit: 4f373a9773efa63fdb73f3972f13ab78b9342b70
      https://github.com/openssl/openssl/commit/4f373a9773efa63fdb73f3972f13ab78b9342b70
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2023-05-02 (Tue, 02 May 2023)

  Changed paths:
    M ssl/ssl_lib.c

  Log Message:
  -----------
  Copy min/max_proto_version from SSL_CTX to SSL only for the same method types

Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Todd Short <todd.short at me.com>
(Merged from https://github.com/openssl/openssl/pull/20764)


Compare: https://github.com/openssl/openssl/compare/1009940c1471...4f373a9773ef


More information about the openssl-commits mailing list