openssl/ssl
erbsland-dev c026101be0 Correct Alert Handling for Missing Compression Methods
Fixes #7940: Updated the compression check logic to improve protocol compliance. The code now returns `SSL_AD_DECODE_ERROR` when no compression method is provided in the ClientHello message. It returns `SSL_AD_ILLEGAL_PARAMETER` if the “null” compression method (0x00) is missing.

Additionally, refactored the related test code for enhanced readability and maintainability.

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/25255)
2024-08-29 19:16:38 +02:00
..
quic Do not implicitly start connection with SSL_handle_events() or SSL_poll() 2024-08-03 09:18:11 -04:00
record EVP_MD_size() updates 2024-08-29 10:29:53 +02:00
rio QUIC POLLING: Support no-quic builds 2024-02-10 11:37:14 +00:00
statem Correct Alert Handling for Missing Compression Methods 2024-08-29 19:16:38 +02:00
bio_ssl.c bio_ssl.c: Do not call SSL_shutdown if not inited 2024-06-25 16:06:17 +02:00
build.info Remove the event queue code 2024-08-07 19:48:26 +02:00
d1_lib.c Remove SSL_ENC_FLAG_EXPLICIT_IV which is only set and never read. 2024-05-14 15:34:07 +02:00
d1_msg.c
d1_srtp.c Copyright year updates 2024-04-09 13:43:26 +02:00
methods.c
pqueue.c
priority_queue.c open brace '{' following struct go on the same line 2024-07-22 06:55:35 -04:00
s3_enc.c EVP_MD_size() updates 2024-08-29 10:29:53 +02:00
s3_lib.c 3DES ciphersuites are not allowed in FIPS anymore 2024-08-01 17:29:32 +02:00
s3_msg.c
ssl_asn1.c
ssl_cert_comp.c Remove trailing whitespace 2024-07-22 06:55:35 -04:00
ssl_cert_table.h
ssl_cert.c Speed up SSL_add_{file,dir}_cert_subjects_to_stack 2024-08-01 17:28:18 +02:00
ssl_ciph.c EVP_MD_size() updates 2024-08-29 10:29:53 +02:00
ssl_conf.c Fix second error from Coverity-161057 2024-07-26 13:25:18 -04:00
ssl_err_legacy.c
ssl_err.c Check that a supported_versions extension is present in an HRR 2024-08-07 19:34:23 +02:00
ssl_init.c Move stack of compression methods from libssl to OSSL_LIB_CTX 2024-05-28 08:56:13 +02:00
ssl_lib.c ssl: factorize and improved hex conversion code 2024-08-07 19:25:10 +02:00
ssl_local.h adds TLS signature algorithms list feature 2024-08-13 11:48:54 +10:00
ssl_mcnf.c Set SSL_CONF_FLAG_SHOW_ERRORS when conf_diagnostics is enabled 2024-05-09 09:20:58 +02:00
ssl_rsa_legacy.c
ssl_rsa.c
ssl_sess.c Incorporate review feedback 2024-06-21 07:57:56 -04:00
ssl_stat.c SSL_alert_desc_string_long(): Delete unnecessary underline 2024-04-04 08:33:21 +02:00
ssl_txt.c Move stack of compression methods from libssl to OSSL_LIB_CTX 2024-05-28 08:56:13 +02:00
ssl_utst.c
sslerr.h
t1_enc.c Copyright year updates 2024-04-09 13:43:26 +02:00
t1_lib.c adds TLS signature algorithms list feature 2024-08-13 11:48:54 +10:00
t1_trce.c adds TLS signature algorithms list feature 2024-08-13 11:48:54 +10:00
tls13_enc.c EVP_MD_size() updates 2024-08-29 10:29:53 +02:00
tls_depr.c
tls_srp.c