diff options
| author | Arun Kuruvila <arun.kuruvila@oracle.com> | 2017-08-24 14:19:38 +0530 |
|---|---|---|
| committer | Arun Kuruvila <arun.kuruvila@oracle.com> | 2017-08-24 14:19:38 +0530 |
| commit | f2f6025a445d9a799ccce27bc9124c3a63c28764 (patch) | |
| tree | fcba66b433dcb5e4294fdadc8479129229112c7a /extra/yassl/include/openssl/ssl.h | |
| parent | be901b60ae59c93848c829d1b0b2cb523ab8692e (diff) | |
| download | mariadb-git-f2f6025a445d9a799ccce27bc9124c3a63c28764.tar.gz | |
Bug#26482173: TLS CIPHER NEGOTIATION INCORRECTLY MATCHES ON
LAST BYTE ONLY (YASSL)
Description:- TLS cipher negociation happens incorrectly
leading to the use of a different
Analysis:- YaSSL based MySQL server will compare only the
last byte of each cipher sent in the Client Hello message.
This can cause TLS connections to fail, due to the server
picking a cipher which the client doesn't actually support.
Fix:- A fix for detecting cipher suites with non leading
zeros is included as YaSSL only supports cipher suites with
leading zeros.
Diffstat (limited to 'extra/yassl/include/openssl/ssl.h')
| -rw-r--r-- | extra/yassl/include/openssl/ssl.h | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/extra/yassl/include/openssl/ssl.h b/extra/yassl/include/openssl/ssl.h index 0609dfc0592..0cce783de35 100644 --- a/extra/yassl/include/openssl/ssl.h +++ b/extra/yassl/include/openssl/ssl.h @@ -1,5 +1,5 @@ /* - Copyright (c) 2005, 2014, Oracle and/or its affiliates. All rights reserved. + Copyright (c) 2005, 2017, Oracle and/or its affiliates. All rights reserved. Use is subject to license terms. This program is free software; you can redistribute it and/or modify @@ -35,7 +35,7 @@ #include "rsa.h" -#define YASSL_VERSION "2.4.2" +#define YASSL_VERSION "2.4.4" #if defined(__cplusplus) |