lib/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-07-30 22:43:08 +03:00
Code Activity

Only allow missing SereverKeyExchange message in bare PSK mode

Browse Source
This commit is contained in:
Paul Bakker
2013-04-19 09:13:37 +02:00
parent bcbe2d8d81
commit 188c8de430
1 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
library/ssl_cli.c
View File

@ -947,11 +947,17 @@ static int ssl_parse_server_key_exchange( ssl_context *ssl )
} }
if( ssl->in_msg[0] != SSL_HS_SERVER_KEY_EXCHANGE ) if( ssl->in_msg[0] != SSL_HS_SERVER_KEY_EXCHANGE )
{
if( ciphersuite_info->key_exchange == POLARSSL_KEY_EXCHANGE_PSK )
{ {
ssl->record_read = 1; ssl->record_read = 1;
goto exit; goto exit;
} }
SSL_DEBUG_MSG( 1, ( "bad server key exchange message" ) );
return( POLARSSL_ERR_SSL_UNEXPECTED_MESSAGE );
}
SSL_DEBUG_BUF( 3, "server key exchange", ssl->in_msg + 4, ssl->in_hslen - 4 ); SSL_DEBUG_BUF( 3, "server key exchange", ssl->in_msg + 4, ssl->in_hslen - 4 );
p = ssl->in_msg + 4; p = ssl->in_msg + 4;