third_party/tlslite/patches/fallback_scsv.patch - Issue 418553003: Implement TLS_FALLBACK_SCSV for SSLClientSocketOpenSSL.

Keyboard Shortcuts

	File
u :	up to issue
j / k :	jump to file after / before current file
J / K :	jump to next file with a comment after / before current file
	Side-by-side diff
i :	toggle intra-line diffs
e :	expand all comments
c :	collapse all comments
s :	toggle showing all comments
n / p :	next / previous diff chunk or comment
N / P :	next / previous comment
<Up> / <Down> :	next / previous line

	Issue
u :	up to list of issues
j / k :	jump to patch after / before current patch
o / <Enter> :	open current patch in side-by-side view
i :	open current patch in unified diff view

	Issue List
j / k :	jump to issue after / before current issue
o / <Enter> :	open current issue

Unified Diff: third_party/tlslite/patches/fallback_scsv.patch

Issue 418553003: Implement TLS_FALLBACK_SCSV for SSLClientSocketOpenSSL. (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src

Patch Set: rebase Created 6 years, 5 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

Index: third_party/tlslite/patches/fallback_scsv.patch

diff --git a/third_party/tlslite/patches/fallback_scsv.patch b/third_party/tlslite/patches/fallback_scsv.patch

index 9a64f11b9d53df5caa0043d0bda107ebacc04137..8cd5f828896b623e1187deb82f89ae97abd1212e 100644

--- a/third_party/tlslite/patches/fallback_scsv.patch

+++ b/third_party/tlslite/patches/fallback_scsv.patch

@@ -115,12 +115,13 @@ index 45b0bbb..bd92161 100755

#Initialize acceptable cipher suites

cipherSuites = []

if verifierDB:

-@@ -1280,6 +1289,13 @@ class TLSConnection(TLSRecordLayer):

+@@ -1280,6 +1289,14 @@ class TLSConnection(TLSRecordLayer):

elif clientHello.client_version > settings.maxVersion:

self.version = settings.maxVersion

+ #Detect if the client performed an inappropriate fallback.

+ elif fallbackSCSV and clientHello.client_version < settings.maxVersion:

++ self.version = clientHello.client_version

+ if CipherSuite.TLS_FALLBACK_SCSV in clientHello.cipher_suites:

+ for result in self._sendError(\

+ AlertDescription.inappropriate_fallback):