mirror/openssl
2
0
Fork 0
mirror of https://github.com/openssl/openssl.git synced 2025-01-18 13:44:20 +08:00
Code Issues Packages Projects Releases Wiki Activity

SSL_conf_cmd: add support for IgnoreUnexpectedEOF

Browse Source 
CLA: trivial

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20089)
This commit is contained in:
Steffen Nurpmeso 2023-01-19 22:04:46 +01:00 committed by Tomas Mraz
parent d79bb5316e
commit 51cf034433
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
doc/man3/SSL_CONF_cmd.pod
View File

@ -569,6 +569,11 @@ B<SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE>. This option only applies to Linux.
KTLS sendfile on FreeBSD doesn't offer an option to disable zerocopy and KTLS sendfile on FreeBSD doesn't offer an option to disable zerocopy and
always runs in this mode. always runs in this mode.
B<IgnoreUnexpectedEOF>: Equivalent to B<SSL_OP_IGNORE_UNEXPECTED_EOF>.
You should only enable this option if the protocol running over TLS can detect
a truncation attack itself, and that the application is checking for that
truncation attack.
=item B<VerifyMode> =item B<VerifyMode>
The B<value> argument is a comma separated list of flags to set. The B<value> argument is a comma separated list of flags to set.

1
ssl/ssl_conf.c
View File

@ -401,6 +401,7 @@ static int cmd_Options(SSL_CONF_CTX *cctx, const char *value)
SSL_FLAG_TBL_INV("TxCertificateCompression", SSL_OP_NO_TX_CERTIFICATE_COMPRESSION), SSL_FLAG_TBL_INV("TxCertificateCompression", SSL_OP_NO_TX_CERTIFICATE_COMPRESSION),
SSL_FLAG_TBL_INV("RxCertificateCompression", SSL_OP_NO_RX_CERTIFICATE_COMPRESSION), SSL_FLAG_TBL_INV("RxCertificateCompression", SSL_OP_NO_RX_CERTIFICATE_COMPRESSION),
SSL_FLAG_TBL("KTLSTxZerocopySendfile", SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE), SSL_FLAG_TBL("KTLSTxZerocopySendfile", SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE),
SSL_FLAG_TBL("IgnoreUnexpectedEOF", SSL_OP_IGNORE_UNEXPECTED_EOF),
}; };
if (value == NULL) if (value == NULL)
return -3; return -3;