Re: Futher debug of possible race condition in 0.9.6b/c

2002-04-13 Thread Lutz Jaenicke
On Fri, Apr 12, 2002 at 11:38:34PM -0600, Dax Kelson wrote: > On Fri, 2002-04-12 at 22:30, Geoff Thorpe wrote: > > > > Can you get any log messages from the server as to "errors" it is reporting > > at the time these connections are being dumped that are *not* reported when > > the connections a

Small bugs in v3 client hello parsing

2002-04-13 Thread Pasi Eronen
Hi, It seems that I've found two small bugs in OpenSSL (at least 0.9.6c and the latest snapshot). In ssl/s3_srvr.c function ssl3_get_client_hello, after the last field (compression) has been parsed, there's a test: /* TLS does not mind if there is extra stuff */ if (s->version == SSL3_VERS

Small bugs in v3 client hello parsing

2002-04-13 Thread Bodo Moeller
> It seems that I've found two small bugs in OpenSSL (at least 0.9.6c > and the latest snapshot). > > In ssl/s3_srvr.c function ssl3_get_client_hello, after the > last field (compression) has been parsed, there's a test: > > /* TLS does not mind if there is extra stuff */ > if (s->version ==