openssl/ssl
Matt Caswell 436a2a0179 Fail if an unrecognised record type is received
TLS1.0 and TLS1.1 say you SHOULD ignore unrecognised record types, but
TLS 1.2 says you MUST send an unexpected message alert. We swap to the
TLS 1.2 behaviour for all protocol versions to prevent issues where no
progress is being made and the peer continually sends unrecognised record
types, using up resources processing them.

Issue reported by 郭志攀

Reviewed-by: Tim Hudson <tjh@openssl.org>
2016-11-02 23:22:48 +00:00
..
record Fail if an unrecognised record type is received 2016-11-02 23:22:48 +00:00
statem Add the SSL_METHOD for TLSv1.3 and all other base changes required 2016-11-02 13:08:21 +00:00
bio_ssl.c Tweaks based on review feedback of BIO size_t work 2016-10-28 09:48:54 +01:00
build.info First pass at writing a writeable packets API 2016-09-13 09:41:21 +01:00
d1_lib.c Add DTLS_get_data_mtu() function 2016-11-02 14:00:10 +00:00
d1_msg.c
d1_srtp.c Convert ServerHello construction to WPACKET 2016-09-29 10:06:46 +01:00
methods.c Add the SSL_METHOD for TLSv1.3 and all other base changes required 2016-11-02 13:08:21 +00:00
packet_locl.h Remove trailing whitespace from some files. 2016-10-10 23:36:21 +01:00
packet.c Remove trailing whitespace from some files. 2016-10-10 23:36:21 +01:00
pqueue.c
s3_cbc.c
s3_enc.c
s3_lib.c Add the SSL_METHOD for TLSv1.3 and all other base changes required 2016-11-02 13:08:21 +00:00
s3_msg.c
ssl_asn1.c
ssl_cert.c Style tweaks following review feedback 2016-09-20 10:16:56 +01:00
ssl_ciph.c Add DTLS_get_data_mtu() function 2016-11-02 14:00:10 +00:00
ssl_conf.c Add the SSL_METHOD for TLSv1.3 and all other base changes required 2016-11-02 13:08:21 +00:00
ssl_err.c Don't set the handshake header in every message 2016-10-03 16:25:48 +01:00
ssl_init.c
ssl_lib.c Convert a big "if" into a "switch" 2016-11-02 13:08:21 +00:00
ssl_locl.h Add DTLS_get_data_mtu() function 2016-11-02 14:00:10 +00:00
ssl_mcnf.c
ssl_rsa.c
ssl_sess.c Add the SSL_METHOD for TLSv1.3 and all other base changes required 2016-11-02 13:08:21 +00:00
ssl_stat.c
ssl_txt.c
ssl_utst.c
t1_enc.c
t1_ext.c Delete some unneeded code 2016-09-29 10:06:46 +01:00
t1_lib.c Add the SSL_METHOD for TLSv1.3 and all other base changes required 2016-11-02 13:08:21 +00:00
t1_reneg.c Convert ServerHello construction to WPACKET 2016-09-29 10:06:46 +01:00
t1_trce.c Add the SSL_METHOD for TLSv1.3 and all other base changes required 2016-11-02 13:08:21 +00:00
tls_srp.c