diff options
author | Nikos Mavrogiannopoulos <nmav@redhat.com> | 2015-12-14 14:34:04 +0100 |
---|---|---|
committer | Nikos Mavrogiannopoulos <nmav@redhat.com> | 2015-12-14 15:11:46 +0100 |
commit | f5174e5c83298d19ab2348d58a1b462ca95f4a9a (patch) | |
tree | 7128ae08cec65721d1e32e191efc5dd6dda74d1c /lib/algorithms.h | |
parent | da7edadb6ff6e440b38c7343cb4e447b7b22db9e (diff) | |
download | gnutls-f5174e5c83298d19ab2348d58a1b462ca95f4a9a.tar.gz |
handshake: when receiving a TLS version which is too low fail
That is, don't treat all unsupported version as being to high. Treat
versions which are not known and lower than the highest as a protocol
error.
Resolves #42
Diffstat (limited to 'lib/algorithms.h')
-rw-r--r-- | lib/algorithms.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/lib/algorithms.h b/lib/algorithms.h index 9959ccea42..db6dd44535 100644 --- a/lib/algorithms.h +++ b/lib/algorithms.h @@ -43,6 +43,7 @@ int _gnutls_version_priority(gnutls_session_t session, int _gnutls_version_is_supported(gnutls_session_t session, const gnutls_protocol_t version); gnutls_protocol_t _gnutls_version_get(uint8_t major, uint8_t minor); +unsigned _gnutls_version_is_too_high(gnutls_session_t session, uint8_t major, uint8_t minor); /* Functions for feature checks */ inline static int |