denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accept TLS records with zero-length plaintext

Browse Source
This commit is contained in:
Martin Willi
2010-09-06 17:04:59 +02:00
parent adb913adeb
commit fe559b5156
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libtls/tls_protection.c
+1 -1
View File
@@ -168,7 +168,7 @@ METHOD(tls_protection_t, process, status_t,
u_int8_t bs; u_int8_t bs;
bs = this->signer_in->get_block_size(this->signer_in); bs = this->signer_in->get_block_size(this->signer_in);
if (data.len <= bs) if (data.len < bs)
{ {
DBG1(DBG_TLS, "TLS record too short to verify MAC"); DBG1(DBG_TLS, "TLS record too short to verify MAC");
this->alert->add(this->alert, TLS_FATAL, TLS_BAD_RECORD_MAC); this->alert->add(this->alert, TLS_FATAL, TLS_BAD_RECORD_MAC);