summaryrefslogtreecommitdiff
path: root/lib/algorithms.h
diff options
context:
space:
mode:
authorNikos Mavrogiannopoulos <nmav@redhat.com>2015-12-14 14:34:04 +0100
committerNikos Mavrogiannopoulos <nmav@redhat.com>2015-12-14 15:11:46 +0100
commitf5174e5c83298d19ab2348d58a1b462ca95f4a9a (patch)
tree7128ae08cec65721d1e32e191efc5dd6dda74d1c /lib/algorithms.h
parentda7edadb6ff6e440b38c7343cb4e447b7b22db9e (diff)
downloadgnutls-f5174e5c83298d19ab2348d58a1b462ca95f4a9a.tar.gz
handshake: when receiving a TLS version which is too low fail
That is, don't treat all unsupported version as being to high. Treat versions which are not known and lower than the highest as a protocol error. Resolves #42
Diffstat (limited to 'lib/algorithms.h')
-rw-r--r--lib/algorithms.h1
1 files changed, 1 insertions, 0 deletions
diff --git a/lib/algorithms.h b/lib/algorithms.h
index 9959ccea42..db6dd44535 100644
--- a/lib/algorithms.h
+++ b/lib/algorithms.h
@@ -43,6 +43,7 @@ int _gnutls_version_priority(gnutls_session_t session,
int _gnutls_version_is_supported(gnutls_session_t session,
const gnutls_protocol_t version);
gnutls_protocol_t _gnutls_version_get(uint8_t major, uint8_t minor);
+unsigned _gnutls_version_is_too_high(gnutls_session_t session, uint8_t major, uint8_t minor);
/* Functions for feature checks */
inline static int