tree 6d9e56cc91f9342dfbaf9f4504a22f4f0e751e1f
parent 774c486cece942570b6a9d16afe236a16ee12079
author Dirkjan Bussink <d.bussink@gmail.com> 1548092103 -0800
committer Willy Tarreau <w@1wt.eu> 1548233482 +0100
encoding latin1

BUG/MEDIUM: ssl: Fix handling of TLS 1.3 KeyUpdate messages

In OpenSSL 1.1.1 TLS 1.3 KeyUpdate messages will trigger the callback
that is used to verify renegotiation is disabled. This means that these
KeyUpdate messages fail. In OpenSSL 1.1.1 a better mechanism is
available with the SSL_OP_NO_RENEGOTIATION flag that disables any TLS
1.2 and earlier negotiation.

So if this SSL_OP_NO_RENEGOTIATION flag is available, instead of having
a manual check, trust OpenSSL and disable the check. This means that TLS
1.3 KeyUpdate messages will work properly.

Reported-By: Adam Langley <agl@imperialviolet.org>