[openssl-dev] [openssl.org #4119] DTLS resets handshake hash too frequently for ClientHello

Matt Caswell via RT rt at openssl.org
Tue Nov 3 10:04:28 UTC 2015


Hi David,

On 03/11/15 01:58, David Benjamin via RT wrote:
> Hey folks,
> 
> We found a small DTLS bug while writing some tests. I think it affects
> 1.0.1 and 1.0.2 too, so I thought I'd send you a note. (Note sure about
> master. I'm unfamiliar with the new state machine mechanism.)

Just from looking at the code I think master should be ok. In the new
state machine, writes go through a "pre-work" phase where
ssl3_init_finished_mac is called for DTLS. This pre-work is skipped if
the actual write needs a retry.

Matt




More information about the openssl-dev mailing list