The V2ClientHello code creates an empty compression list, but the
compression list must explicitly contain the null compression (and later
code enforces this). As a result, all V2ClientHellos currently get rejected
on master.

The SendV2ClientHello-Sync test in BoringSSL's test suite can be used to
repro this:
https://mta.openssl.org/pipermail/openssl-dev/2016-March/005779.html

David

-- 
Ticket here: http://rt.openssl.org/Ticket/Display.html?id=4387
Please log in as guest with password guest if prompted

Attachment: 0001-Fix-V2ClientHello-handling.patch
Description: Binary data

-- 
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Reply via email to