ECDH downgrade bug fix.
Fix bug where an OpenSSL client would accept a handshake using an ephemeral ECDH ciphersuites with the server key exchange message omitted. Thanks to Karthikeyan Bhargavan for reporting this issue. CVE-2014-3572 Reviewed-by: Matt Caswell <matt@openssl.org> (cherry picked from commit b15f8769) Conflicts: CHANGES ssl/s3_clnt.c
parent
ec2fede9
Please register or sign in to comment