Commit 02f873c5 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Send alert for bad DH CKE 



RT#4511

Reviewed-by: default avatarMatt Caswell <matt@openssl.org>
parent b746aa3f

ssl/s3_srvr.c

+4 −2
Original line number Diff line number Diff line
@@ -2325,7 +2325,8 @@ int ssl3_get_client_key_exchange(SSL *s) 
            if (!(s->options & SSL_OP_SSLEAY_080_CLIENT_DH_BUG)) {

                SSLerr(SSL_F_SSL3_GET_CLIENT_KEY_EXCHANGE,

                       SSL_R_DH_PUBLIC_VALUE_LENGTH_IS_WRONG);

                goto err;

                al = SSL_AD_HANDSHAKE_FAILURE;

                goto f_err;

            } else {

                p -= 2;

                i = (int)n;
@@ -2378,9 +2379,10 @@ int ssl3_get_client_key_exchange(SSL *s) 
        i = DH_compute_key(p, pub, dh_srvr);



        if (i <= 0) {

            al = SSL_AD_HANDSHAKE_FAILURE;

            SSLerr(SSL_F_SSL3_GET_CLIENT_KEY_EXCHANGE, ERR_R_DH_LIB);

            BN_clear_free(pub);

            goto err;

            goto f_err;

        }



        DH_free(s->s3->tmp.dh);