Commit a46c7052 authored by Bodo Moeller's avatar Bodo Moeller
Browse files

Support TLS_FALLBACK_SCSV. 

Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
parent dc7bca8b

CHANGES

+6 −0
Changes for CHANGES: 6 added lines, 0 removed lines.
Original line number Diff line number Diff line
@@ -4,6 +4,12 @@ 


 Changes between 1.0.1i and 1.0.2 [xx XXX xxxx]



  *) Add support for TLS_FALLBACK_SCSV.

     Client applications doing fallback retries should call

     SSL_set_mode(s, SSL_MODE_SEND_FALLBACK_SCSV).

     (CVE-2014-3566)

     [Adam Langley, Bodo Moeller]



  *) Accelerated NIST P-256 elliptic curve implementation for x86_64

     (other platforms pending).

     [Shay Gueron (Intel Corp), Andy Polyakov]

Makefile.org

deleted100644 → 0
+0 −686

File deleted.

Preview size limit exceeded, changes collapsed.

apps/s_client.c

+10 −0

File changed.

Preview size limit exceeded, changes collapsed.

crypto/err/openssl.ec

+1 −0
Changes for crypto/err/openssl.ec: 1 added line, 0 removed lines.
Original line number Diff line number Diff line
@@ -72,6 +72,7 @@ R SSL_R_TLSV1_ALERT_EXPORT_RESTRICTION 1060 
R SSL_R_TLSV1_ALERT_PROTOCOL_VERSION		1070

R SSL_R_TLSV1_ALERT_INSUFFICIENT_SECURITY	1071

R SSL_R_TLSV1_ALERT_INTERNAL_ERROR		1080

R SSL_R_SSLV3_ALERT_INAPPROPRIATE_FALLBACK	1086

R SSL_R_TLSV1_ALERT_USER_CANCELLED		1090

R SSL_R_TLSV1_ALERT_NO_RENEGOTIATION		1100

R SSL_R_TLSV1_UNSUPPORTED_EXTENSION		1110

ssl/d1_lib.c

+19 −0

File changed.

Preview size limit exceeded, changes collapsed.