CVSROOT: /cvs Module name: src Changes by: js...@cvs.openbsd.org 2021/03/10 11:27:02
Modified files: lib/libssl : ssl_clnt.c ssl_locl.h ssl_pkt.c ssl_sigalgs.c ssl_srvr.c ssl_tlsext.c ssl_versions.c tls13_client.c tls13_server.c Log message: Improve internal version handling. Add handshake fields for our minimum TLS version, our maximum TLS version and the TLS version negotiated during the handshake. Initialise our min/max versions at the start of the handshake and leave these unchanged. The negotiated TLS version is set in the client once we receive the ServerHello and in the server at the point we select the highest shared version. Provide an ssl_effective_version() function that returns the negotiated TLS version if known, otherwise our maximum TLS version - this is effectively what is stored in s->version currently. Convert most of the internal code to use one of these three version fields, which greatly simplifies code (especially in the TLS extension handling code). ok tb@