|
 |
ef93cf9 |
diff -up openssl-1.1.1g/include/openssl/ssl3.h.reneg-no-extms openssl-1.1.1g/include/openssl/ssl3.h
|
|
|
ef93cf9 |
--- openssl-1.1.1g/include/openssl/ssl3.h.reneg-no-extms 2020-04-21 14:22:39.000000000 +0200
|
|
|
ef93cf9 |
+++ openssl-1.1.1g/include/openssl/ssl3.h 2020-06-05 15:20:22.090682776 +0200
|
|
|
ef93cf9 |
@@ -292,6 +292,9 @@ extern "C" {
|
|
|
ef93cf9 |
|
|
|
ef93cf9 |
# define TLS1_FLAGS_STATELESS 0x0800
|
|
|
ef93cf9 |
|
|
|
ef93cf9 |
+/* Set if extended master secret extension required on renegotiation */
|
|
|
ef93cf9 |
+# define TLS1_FLAGS_REQUIRED_EXTMS 0x1000
|
|
|
ef93cf9 |
+
|
|
|
ef93cf9 |
# define SSL3_MT_HELLO_REQUEST 0
|
|
|
ef93cf9 |
# define SSL3_MT_CLIENT_HELLO 1
|
|
|
ef93cf9 |
# define SSL3_MT_SERVER_HELLO 2
|
|
|
ef93cf9 |
diff -up openssl-1.1.1g/ssl/statem/extensions.c.reneg-no-extms openssl-1.1.1g/ssl/statem/extensions.c
|
|
|
ef93cf9 |
--- openssl-1.1.1g/ssl/statem/extensions.c.reneg-no-extms 2020-04-21 14:22:39.000000000 +0200
|
|
|
ef93cf9 |
+++ openssl-1.1.1g/ssl/statem/extensions.c 2020-06-05 15:22:19.677653437 +0200
|
|
|
ef93cf9 |
@@ -1168,14 +1168,26 @@ static int init_etm(SSL *s, unsigned int
|
|
|
ef93cf9 |
|
|
|
ef93cf9 |
static int init_ems(SSL *s, unsigned int context)
|
|
|
ef93cf9 |
{
|
|
|
ef93cf9 |
- if (!s->server)
|
|
|
ef93cf9 |
+ if (s->s3->flags & TLS1_FLAGS_RECEIVED_EXTMS) {
|
|
|
ef93cf9 |
s->s3->flags &= ~TLS1_FLAGS_RECEIVED_EXTMS;
|
|
|
ef93cf9 |
+ s->s3->flags |= TLS1_FLAGS_REQUIRED_EXTMS;
|
|
|
ef93cf9 |
+ }
|
|
|
ef93cf9 |
|
|
|
ef93cf9 |
return 1;
|
|
|
ef93cf9 |
}
|
|
|
ef93cf9 |
|
|
|
ef93cf9 |
static int final_ems(SSL *s, unsigned int context, int sent)
|
|
|
ef93cf9 |
{
|
|
|
ef93cf9 |
+ /*
|
|
|
ef93cf9 |
+ * Check extended master secret extension is not dropped on
|
|
|
ef93cf9 |
+ * renegotiation.
|
|
|
ef93cf9 |
+ */
|
|
|
ef93cf9 |
+ if (!(s->s3->flags & TLS1_FLAGS_RECEIVED_EXTMS)
|
|
|
ef93cf9 |
+ && (s->s3->flags & TLS1_FLAGS_REQUIRED_EXTMS)) {
|
|
|
ef93cf9 |
+ SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE, SSL_F_FINAL_EMS,
|
|
|
ef93cf9 |
+ SSL_R_INCONSISTENT_EXTMS);
|
|
|
ef93cf9 |
+ return 0;
|
|
|
ef93cf9 |
+ }
|
|
|
ef93cf9 |
if (!s->server && s->hit) {
|
|
|
ef93cf9 |
/*
|
|
|
ef93cf9 |
* Check extended master secret extension is consistent with
|