David Woodhouse df426c0691 Fix SSL_export_keying_material() for DTLS1_BAD_VER ...

Commit d8e8590e ("Fix missing return value checks in SCTP") made the
DTLS handshake fail, even for non-SCTP connections, if
SSL_export_keying_material() fails. Which it does, for DTLS1_BAD_VER.

Apply the trivial fix to make it succeed, since there's no real reason
why it shouldn't even though we never need it.

Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(cherry picked from commit c8a18468caef4d62778381be0acdadc8a88d6e51)

2016-08-26 13:44:11 +01:00

..

bio_ssl.c

Handle SSL_ERROR_WANT_X509_LOOKUP

2015-09-20 14:21:18 +01:00

clienthellotest.c

GH354: Memory leak fixes

2015-08-28 11:59:23 -04:00

d1_both.c

Fix DTLS buffered message DoS attack

2016-08-22 10:59:41 +01:00

d1_clnt.c

Fix DTLS buffered message DoS attack

2016-08-22 10:59:41 +01:00

d1_lib.c

Fix DTLS buffered message DoS attack

2016-08-22 10:59:41 +01:00

d1_meth.c

Ensure the dtls1_get_*_methods work with DTLS_ANY_VERSION

2015-11-04 14:46:03 +00:00

d1_pkt.c

Always use session_ctx when removing a session

2016-08-26 10:19:56 +01:00

d1_srtp.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

d1_srvr.c

Fix DTLS buffered message DoS attack

2016-08-22 10:59:41 +01:00

dtls1.h

Fix d2i_SSL_SESSION for DTLS1_BAD_VER

2015-02-27 20:31:28 +00:00

dtlstest.c

Fix no-ec

2016-08-24 09:23:14 +01:00

heartbeat_test.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

install-ssl.com

Don't forget to install srtp.h as well

2012-05-10 15:01:26 +00:00

kssl_lcl.h

Remove the "eay" c-file-style indicators

2015-12-18 13:39:34 +01:00

kssl.c

Remove the "eay" c-file-style indicators

2015-12-18 13:39:34 +01:00

kssl.h

Remove the "eay" c-file-style indicators

2015-12-18 13:39:34 +01:00

Makefile

Add a DTLS unprocesed records test

2016-08-19 13:50:27 +01:00

s2_clnt.c

Change usage of RAND_pseudo_bytes to RAND_bytes

2016-06-27 15:00:08 +01:00

s2_enc.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

s2_lib.c

Remove LOW from the default

2016-03-07 18:54:57 +01:00

s2_meth.c

Add no-ssl2-method

2016-03-14 21:13:59 +01:00

s2_pkt.c

Add length sanity check in SSLv2 n_do_ssl_write()

2015-04-29 17:23:45 +01:00

s2_srvr.c

Change usage of RAND_pseudo_bytes to RAND_bytes

2016-06-27 15:00:08 +01:00

s3_both.c

Ensure verify error is set when X509_verify_cert() fails

2016-05-19 18:15:08 -04:00

s3_cbc.c

Good hygiene with size_t output argument.

2015-11-21 05:23:20 -05:00

s3_clnt.c

Fix NULL-return checks in 1.0.2

2016-08-19 10:44:32 -04:00

s3_enc.c

Fix NULL-return checks in 1.0.2

2016-08-19 10:44:32 -04:00

s3_lib.c

SWEET32 (CVE-2016-2183): Move DES from HIGH to MEDIUM

2016-08-24 08:55:50 -04:00

s3_meth.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

s3_pkt.c

Always use session_ctx when removing a session

2016-08-26 10:19:56 +01:00

s3_srvr.c

Add missing casts.

2016-07-28 11:48:59 -04:00

s23_clnt.c

Change usage of RAND_pseudo_bytes to RAND_bytes

2016-06-27 15:00:08 +01:00

s23_lib.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

s23_meth.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

s23_pkt.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

s23_srvr.c

Re-align some comments after running the reformat script.

2015-01-22 09:31:48 +00:00

srtp.h

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

ssl2.h

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

ssl3.h

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

ssl23.h

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

ssl_algs.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

ssl_asn1.c

Make no-psk compile without warnings.

2015-09-16 18:09:00 +01:00

ssl_cert.c

Ensure we check i2d_X509 return val

2016-04-26 14:32:45 +01:00

ssl_ciph.c

Fix NULL-return checks in 1.0.2

2016-08-19 10:44:32 -04:00

ssl_conf.c

Disable SSLv2 default build, default negotiation and weak ciphers.

2016-03-01 11:20:10 +00:00

ssl_err2.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

ssl_err.c

Fix DTLS replay protection

2016-08-19 13:50:27 +01:00

ssl_lib.c

Fix SSL_export_keying_material() for DTLS1_BAD_VER

2016-08-26 13:44:11 +01:00

ssl_locl.h

Fix DTLS buffered message DoS attack

2016-08-22 10:59:41 +01:00

ssl_rsa.c

Remove confusing comment.

2016-05-02 12:54:38 -04:00

ssl_sess.c

Always use session_ctx when removing a session

2016-08-26 10:19:56 +01:00

ssl_stat.c

Add Error state

2015-05-05 19:50:12 +01:00

ssl_task.c

Re-align some comments after running the reformat script.

2015-01-22 09:31:48 +00:00

ssl_txt.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

ssl_utst.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

ssl-lib.com

VMS: Use strict refdef extern model when building library object files

2016-08-22 15:50:28 +02:00

ssl.h

Update function error code

2016-08-19 13:50:27 +01:00

ssltest.c

Fix the no-tls1 option

2016-08-26 13:38:50 +01:00

sslv2conftest.c

Silence some "maybe used uninitialised" warnings

2016-08-22 09:25:12 +01:00

t1_clnt.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

t1_enc.c

Fix a double free in tls1_setup_key_block

2016-05-19 20:55:55 +01:00

t1_ext.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

t1_lib.c

Sanity check ticket length.

2016-08-23 23:18:51 +01:00

t1_meth.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

t1_reneg.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

t1_srvr.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

t1_trce.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

tls1.h

Fix references to various RFCs

2015-10-23 20:32:58 +02:00

tls_srp.c

Code style: space after 'if'

2015-04-16 13:50:01 -04:00