xfnw/plan9fox
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

libsec: handle TLS 1.2 changes in CertificateRequest message

Browse source
This commit is contained in:
cinap_lenrek 2015-09-12 13:04:47 +02:00
parent c06e464ec4
commit 455b42743d
1 changed files with 13 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
sys/src/libsec/port/tlshand.c
View file

@ -1614,6 +1614,19 @@ msgRecv(TlsConnection *c, Msg *m)
m->u.certificateRequest.types = makebytes(p, nn);
p += nn;
n -= nn;
if(c->version >= TLS12Version){
/* skip supported_signature_algorithms */
if(n < 2)
goto Short;
nn = get16(p);
p += 2;
n -= 2;
if(nn > n)
goto Short;
p += nn;
n -= nn;
}
if(n < 2)
goto Short;
nn = get16(p);