mirror/curl
2
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2025-03-01 15:15:34 +08:00
Code Issues Packages Projects Releases Wiki Activity
33cfcfd9f0
curl/lib/vtls
History
Jay Satiro 33cfcfd9f0 TLS: Fix switching off SSL session id when client cert is used 
Move the sessionid flag to ssl_primary_config so that ssl and proxy_ssl
will each have their own sessionid flag.

Regression since HTTPS-Proxy support was added in cb4e2be. Prior to that
this issue had been fixed in 247d890, CVE-2016-5419.

Bug: https://github.com/curl/curl/issues/1341
Reported-by: lijian996@users.noreply.github.com

The new incarnation of this bug is called CVE-2017-7468 and is documented
here: https://curl.haxx.se/docs/adv_20170419.html
2017-04-18 07:56:34 +02:00
..
axtls.c TLS: Fix switching off SSL session id when client cert is used 2017-04-18 07:56:34 +02:00
axtls.h rand: make it work without TLS backing 2017-01-12 17:44:21 +01:00
cyassl.c TLS: Fix switching off SSL session id when client cert is used 2017-04-18 07:56:34 +02:00
cyassl.h cyassl: fix typo 2017-02-21 22:24:39 -05:00
darwinssl.c TLS: Fix switching off SSL session id when client cert is used 2017-04-18 07:56:34 +02:00
darwinssl.h rand: make it work without TLS backing 2017-01-12 17:44:21 +01:00
gskit.c spelling fixes 2017-03-26 23:56:23 +02:00
gskit.h curl_version_info: add CURL_VERSION_HTTPS_PROXY 2016-11-26 17:28:53 +01:00
gtls.c TLS: Fix switching off SSL session id when client cert is used 2017-04-18 07:56:34 +02:00
gtls.h rand: make it work without TLS backing 2017-01-12 17:44:21 +01:00
mbedtls.c TLS: Fix switching off SSL session id when client cert is used 2017-04-18 07:56:34 +02:00
mbedtls.h mbedtls: add support for CURLOPT_SSL_CTX_FUNCTION 2017-03-21 23:51:44 -04:00
nss.c TLS: Fix switching off SSL session id when client cert is used 2017-04-18 07:56:34 +02:00
nssg.h rand: make it work without TLS backing 2017-01-12 17:44:21 +01:00
openssl.c TLS: Fix switching off SSL session id when client cert is used 2017-04-18 07:56:34 +02:00
openssl.h rand: make it work without TLS backing 2017-01-12 17:44:21 +01:00
polarssl_threadlock.c Curl_polarsslthreadlock_thread_setup: clear array at init 2016-10-18 13:05:43 +02:00
polarssl_threadlock.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
polarssl.c TLS: Fix switching off SSL session id when client cert is used 2017-04-18 07:56:34 +02:00
polarssl.h polarssl: fix hangs 2017-01-28 19:47:08 +01:00
schannel.c TLS: Fix switching off SSL session id when client cert is used 2017-04-18 07:56:34 +02:00
schannel.h rand: make it work without TLS backing 2017-01-12 17:44:21 +01:00
vtls.c TLS: Fix switching off SSL session id when client cert is used 2017-04-18 07:56:34 +02:00
vtls.h checksrc: code style: use 'char *name' style 2016-11-24 23:58:22 +01:00