openssl/ssl
Matt Caswell ea6bd26454 Correct reading back of tlsext_tick_lifetime_hint from ASN1.
When writing out the hint, if the hint > 0, then we write it out otherwise
we skip it.

Previously when reading the hint back in, if were expecting to see one
(because the ticket length > 0), but it wasn't present then we set the hint
to -1, otherwise we set it to 0. This fails to set the hint to the same as
when it was written out.

The hint should never be negative because the RFC states the hint is
unsigned. It is valid for a server to set the hint to 0 (this means the
lifetime is unspecified according to the RFC). If the server set it to 0, it
should still be 0 when we read it back in.

Reviewed-by: Tim Hudson <tjh@openssl.org>
2015-02-10 22:54:18 +00:00
..
bio_ssl.c dead code cleanup: #if 0 in ssl 2015-02-06 10:52:12 -05:00
d1_both.c dead code cleanup: #if 0 in ssl 2015-02-06 10:52:12 -05:00
d1_clnt.c dead code cleanup: #if 0 in ssl 2015-02-06 10:52:12 -05:00
d1_lib.c Fix post-reformat errors preventing windows compilation 2015-01-22 14:09:37 +00:00
d1_meth.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
d1_pkt.c dead code cleanup: #if 0 in ssl 2015-02-06 10:52:12 -05:00
d1_srtp.c dead code cleanup: #if 0 in ssl 2015-02-06 10:52:12 -05:00
d1_srvr.c dead code cleanup: #if 0 in ssl 2015-02-06 10:52:12 -05:00
dtls1.h Make libssl opaque. Move all structures that were previously protected by 2015-01-31 18:06:45 +00:00
heartbeat_test.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
install-ssl.com
kssl_lcl.h Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
kssl.c dead code cleanup: #if 0 in ssl 2015-02-06 10:52:12 -05:00
kssl.h Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
Makefile
s3_both.c OPENSSL_NO_XXX cleanup: OPENSSL_NO_BUF_FREELISTS 2015-01-27 16:43:53 -05:00
s3_cbc.c OPENSSL_NO_xxx cleanup: SHA 2015-01-27 12:34:45 -05:00
s3_clnt.c dead code cleanup: #if 0 in ssl 2015-02-06 10:52:12 -05:00
s3_enc.c More comment realignment 2015-01-22 09:20:10 +00:00
s3_lib.c dead code cleanup: #if 0 in ssl 2015-02-06 10:52:12 -05:00
s3_meth.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
s3_pkt.c dead code cleanup: #if 0 in ssl 2015-02-06 10:52:12 -05:00
s3_srvr.c Remove support for SSL_OP_NETSCAPE_CA_DN_BUG. 2015-02-06 11:35:07 +00:00
s23_clnt.c dead code cleanup: #if 0 in ssl 2015-02-06 10:52:12 -05:00
s23_lib.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
s23_meth.c OPENSSL_NO_XXX cleanup: NO_TLS, NO_TLS1 2015-01-27 15:14:12 -05:00
s23_pkt.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
s23_srvr.c dead code cleanup: #if 0 in ssl 2015-02-06 10:52:12 -05:00
srtp.h Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
ssl2.h Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
ssl3.h Make libssl opaque. Move all structures that were previously protected by 2015-01-31 18:06:45 +00:00
ssl23.h Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
ssl_algs.c OPENSSL_NO_xxx cleanup: SHA 2015-01-27 12:34:45 -05:00
ssl_asn1.c Correct reading back of tlsext_tick_lifetime_hint from ASN1. 2015-02-10 22:54:18 +00:00
ssl_cert.c dead code cleanup: #if 0 in ssl 2015-02-06 10:52:12 -05:00
ssl_ciph.c Re-align some comments after running the reformat script. 2015-01-22 09:20:10 +00:00
ssl_conf.c Fix segfault with empty fields as last in the config. 2015-01-24 14:46:50 +01:00
ssl_err2.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
ssl_err.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
ssl_lib.c Apache Traffic Server has a need to set the rbio without touching the wbio. 2015-02-07 14:29:16 +00:00
ssl_locl.h Make tlsext_tick_lifetime_hint an unsigned long (from signed long). 2015-02-10 22:53:24 +00:00
ssl_rsa.c clang on Linux x86_64 complains about unreachable code. 2015-01-29 01:54:09 +01:00
ssl_sess.c Provide the API functions SSL_SESSION_has_ticket and 2015-02-10 22:54:09 +00:00
ssl_stat.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
ssl_task.c Make the libssl opaque changes compile on VMS 2015-01-31 18:07:32 +00:00
ssl_txt.c Extended master secret extension support. 2015-02-03 14:50:07 +00:00
ssl_utst.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
ssl-lib.com VMS adjustments: 2015-01-30 14:43:57 +01:00
ssl.h Provide the API functions SSL_SESSION_has_ticket and 2015-02-10 22:54:09 +00:00
ssltest.c Fix error handling in ssltest 2015-02-06 10:08:16 +00:00
t1_clnt.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
t1_enc.c dead code cleanup: #if 0 in ssl 2015-02-06 10:52:12 -05:00
t1_ext.c Remove support for opaque-prf 2015-01-28 15:37:16 -05:00
t1_lib.c dead code cleanup: #if 0 in ssl 2015-02-06 10:52:12 -05:00
t1_meth.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
t1_reneg.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
t1_srvr.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
t1_trce.c dead code cleanup: #if 0 in ssl 2015-02-06 10:52:12 -05:00
tls1.h Add extms support to master key generation. 2015-02-03 14:50:07 +00:00
tls_srp.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00