diff options
| author | Emilia Kasper <emilia@openssl.org> | 2016-02-19 19:24:44 +0300 |
|---|---|---|
| committer | Emilia Kasper <emilia@openssl.org> | 2016-02-19 19:24:44 +0300 |
| commit | aa474d1fb172aabb29dad04cb6aaeca601a4378c (patch) | |
| tree | 51a82f8896aecd1f989f84e08ea15b0b9e4255e2 /test/recipes/70-test_sslcertstatus.t | |
| parent | f0496ad71fbacccf5a95f40d31d251bc8cf9dcfb (diff) | |
TLS: reject duplicate extensions
Adapted from BoringSSL. Added a test.
The extension parsing code is already attempting to already handle this for
some individual extensions, but it is doing so inconsistently. Duplicate
efforts in individual extension parsing will be cleaned up in a follow-up.
Reviewed-by: Stephen Henson <steve@openssl.org>
Diffstat (limited to 'test/recipes/70-test_sslcertstatus.t')
| -rwxr-xr-x | test/recipes/70-test_sslcertstatus.t | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/test/recipes/70-test_sslcertstatus.t b/test/recipes/70-test_sslcertstatus.t index 9a0c5f8eac..303de5e566 100755 --- a/test/recipes/70-test_sslcertstatus.t +++ b/test/recipes/70-test_sslcertstatus.t @@ -99,7 +99,7 @@ sub certstatus_filter if ($message->mt == TLSProxy::Message::MT_SERVER_HELLO) { #Add the status_request to the ServerHello even though we are not #going to send a CertificateStatus message - $message->set_extension(TLSProxy::ClientHello::EXT_STATUS_REQUEST, + $message->set_extension(TLSProxy::Message::EXT_STATUS_REQUEST, ""); $message->repack(); |