CVSROOT: /cvs Module name: src Changes by: js...@cvs.openbsd.org 2021/07/21 01:51:12
Modified files:
lib/libssl : d1_pkt.c
Log message:
Silently discard invalid DTLS records.
Per RFC 6347 section 4.1.2.1, DTLS should silently discard invalid records,
including those that have a bad MAC. When converting to the new record
layer, we inadvertantly switched to standard TLS behaviour, where an
invalid record is fatal. This restores the previous behaviour.
Issue noted by inoguchi@
ok inoguchi@
