Richard Levitte a39aa18644 Better check of DH parameters in TLS data ...

When the client reads DH parameters from the TLS stream, we only
checked that they all are non-zero.  This change updates the check to
use DH_check_params()

DH_check_params() is a new function for light weight checking of the p
and g parameters:

    check that p is odd
    check that 1 < g < p - 1

Reviewed-by: Viktor Dukhovni <viktor@openssl.org>

2017-01-26 10:54:36 +00:00

..

record

Replace div-spoiler hack with simpler code, GH#1027,2253.

2017-01-24 20:06:05 +01:00

statem

Better check of DH parameters in TLS data

2017-01-26 10:54:36 +00:00

bio_ssl.c

Fix BIO_pop for SSL BIOs

2016-07-29 14:09:57 +01:00

build.info

Update build.info files for auto-init/de-init

2016-02-09 15:11:38 +00:00

d1_lib.c

Ensure we are in accept state in DTLSv1_listen

2016-11-29 10:04:37 +00:00

d1_msg.c

Whitespace cleanup in ssl folder

2016-06-29 09:56:39 -04:00

d1_srtp.c

Indent ssl/

2016-08-18 14:02:29 +02:00

methods.c

Indent ssl/

2016-08-18 14:02:29 +02:00

packet_locl.h

Indent ssl/

2016-08-18 14:02:29 +02:00

pqueue.c

Copyright consolidation 01/10

2016-05-17 14:19:19 -04:00

s3_cbc.c

Indent ssl/

2016-08-18 14:02:29 +02:00

s3_enc.c

fix a memory leak in ssl3_generate_key_block fix the error handling in ssl3_change_cipher_state

2017-01-23 11:44:32 +01:00

s3_lib.c

Put DES into "not default" category.

2016-08-24 14:05:52 +01:00

s3_msg.c

Indent ssl/

2016-08-18 14:02:29 +02:00

ssl_asn1.c

Indent ssl/

2016-08-18 14:02:29 +02:00

ssl_cert.c

Indent ssl/

2016-08-18 14:02:29 +02:00

ssl_ciph.c

Remove a hack from ssl_test_old

2016-11-16 10:34:41 +00:00

ssl_conf.c

Indent ssl/

2016-08-18 14:02:29 +02:00

ssl_err.c

Fix missing NULL checks in NewSessionTicket construction

2016-09-29 16:17:54 +01:00

ssl_init.c

Indent ssl/

2016-08-18 14:02:29 +02:00

ssl_lib.c

Check that SCT timestamps are not in the future

2016-11-15 16:28:14 -05:00

ssl_locl.h

Fix DTLS buffered message DoS attack

2016-08-22 10:53:55 +01:00

ssl_mcnf.c

Indent ssl/

2016-08-18 14:02:29 +02:00

ssl_rsa.c

Indent ssl/

2016-08-18 14:02:29 +02:00

ssl_sess.c

Fix a ssl session leak due to OOM in lh_SSL_SESSION_insert

2017-01-24 15:06:43 +01:00

ssl_stat.c

Add missing debug strings.

2016-09-07 16:09:01 -04:00

ssl_txt.c

Indent ssl/

2016-08-18 14:02:29 +02:00

ssl_utst.c

Copyright consolidation 01/10

2016-05-17 14:19:19 -04:00

t1_enc.c

Indent ssl/

2016-08-18 14:02:29 +02:00

t1_ext.c

Indent ssl/

2016-08-18 14:02:29 +02:00

t1_lib.c

If client doesn't send curves list, don't assume all.

2017-01-18 12:25:16 -05:00

t1_reneg.c

Indent ssl/

2016-08-18 14:02:29 +02:00

t1_trce.c

Ensure trace recognises X25519

2016-09-08 12:36:46 +01:00

tls_srp.c

Indent ssl/

2016-08-18 14:02:29 +02:00