Commit a04baf9b authored by Lutz Jänicke's avatar Lutz Jänicke
Browse files

Allow client certificate lists > 16kB ("Douglas E. Engert" <deengert@anl.gov>.)

parent 029fb8aa

CHANGES

+6 −0
Original line number Diff line number Diff line
@@ -4,6 +4,12 @@ 


 Changes between 0.9.6b and 0.9.6c  [XX xxx XXXX]



  *) s3_srvr.c: allow sending of large client certificate lists (> 16 kB).

     This function was broken, as the check for a new client hello message

     to handle SGC did not allow these large messages.

     (Tracked down by "Douglas E. Engert" <deengert@anl.gov>.)

     [Lutz Jaenicke]



  *) Add alert descriptions for TLSv1 to SSL_alert_desc_string[_long]().

     [Lutz Jaenicke]

ssl/s3_srvr.c

+5 −1
Original line number Diff line number Diff line
@@ -537,7 +537,11 @@ static int ssl3_check_client_hello(SSL *s) 
		SSL3_ST_SR_CERT_A,

		SSL3_ST_SR_CERT_B,

		-1,

		SSL3_RT_MAX_PLAIN_LENGTH,

#if defined(MSDOS) && !defined(WIN32)

		1024*30, /* 30k max cert list :-) */

#else

		1024*100, /* 100k max cert list :-) */

#endif

		&ok);

	if (!ok) return((int)n);

	s->s3->tmp.reuse_message = 1;