Snippets Groups Projects

cl-clear-GCM-flag.patch

Forked from Main / Synchronet

9457 commits behind, 1 commit ahead of the upstream repository.

5 years ago

Clear SSL_PFLAG_GCM when setting a non-GCM suite. · c822242c

deuce authored 5 years ago

This fixes the error seen on old browsers using
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA after a DHE GCM fallure.

Thanks for all your help wkitty42!

c822242c

Clear SSL_PFLAG_GCM when setting a non-GCM suite.

deuce authored 5 years ago

This fixes the error seen on old browsers using
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA after a DHE GCM fallure.

Thanks for all your help wkitty42!

cl-clear-GCM-flag.patch 350 B

--- ./session/ssl_hs.c.orig	2020-01-24 18:02:09.710811000 -0500
+++ ./session/ssl_hs.c	2020-01-24 18:02:24.220573000 -0500
@@ -223,6 +223,7 @@
 		if( cryptStatusError( status ) )
 			return( status );
 		sessionInfoPtr->cryptBlocksize = queryInfo.blockSize;
+		CLEAR_FLAG( sessionInfoPtr->protocolFlags, SSL_PFLAG_GCM );
 		}
 
 	return( CRYPT_OK );