openssl/ssl
David Benjamin 1ed6587154 Resolve DTLS cookie and version before session resumption.
Session resumption involves a version check, so version negotiation must
happen first. Currently, the DTLS implementation cannot do session
resumption in DTLS 1.0 because the ssl_version check always checks
against 1.2.

Switching the order also removes the need to fixup ssl_version in DTLS
version negotiation.

Signed-off-by: Kurt Roeckx <kurt@roeckx.be>
Reviewed-by: Viktor Dukhovni <viktor@openssl.org>

RT: #4392, MR: #2452
2016-03-27 23:59:00 +02:00
..
record Fix building without multiblock support 2016-03-08 08:52:45 +00:00
statem Resolve DTLS cookie and version before session resumption. 2016-03-27 23:59:00 +02:00
bio_ssl.c RT4660: BIO_METHODs should be const. 2016-03-21 16:49:10 -04:00
build.info
d1_lib.c Fix no-sock 2016-03-21 16:33:59 +00:00
d1_msg.c
d1_srtp.c
Makefile.in Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
methods.c Allow different protocol version when trying to reuse a session 2016-03-27 23:58:50 +02:00
packet_locl.h
pqueue.c
s3_cbc.c
s3_enc.c Lazily initialise the compression buffer 2016-03-07 21:39:27 +00:00
s3_lib.c Remove #error from include files. 2016-03-20 19:48:36 -04:00
s3_msg.c Implement write pipeline support in libssl 2016-03-07 21:39:27 +00:00
ssl_asn1.c
ssl_cert.c Remove #error from include files. 2016-03-20 19:48:36 -04:00
ssl_ciph.c Check algo_strength using SSL_STRONG_MASK 2016-03-22 22:00:12 +01:00
ssl_conf.c Remove #error from include files. 2016-03-20 19:48:36 -04:00
ssl_err.c Allow different protocol version when trying to reuse a session 2016-03-27 23:58:50 +02:00
ssl_init.c Swap the init code to use CRYPTO_ONCE 2016-03-07 17:17:21 +00:00
ssl_lib.c Remove #error from include files. 2016-03-20 19:48:36 -04:00
ssl_locl.h Allow different protocol version when trying to reuse a session 2016-03-27 23:58:50 +02:00
ssl_mcnf.c
ssl_rsa.c
ssl_sess.c Allow different protocol version when trying to reuse a session 2016-03-27 23:58:50 +02:00
ssl_stat.c
ssl_txt.c Add support for minimum and maximum protocol version supported by a cipher 2016-03-09 19:10:28 +01:00
ssl_utst.c
t1_enc.c Remove #error from include files. 2016-03-20 19:48:36 -04:00
t1_ext.c Remove #error from include files. 2016-03-20 19:48:36 -04:00
t1_lib.c Fix ALPN - more fixes 2016-03-20 21:09:32 -04:00
t1_reneg.c
t1_trce.c
tls_srp.c