summaryrefslogtreecommitdiffstats
path: root/crypto/openssl/ssl
diff options
context:
space:
mode:
authorkris <kris@FreeBSD.org>2001-07-19 20:05:28 +0000
committerkris <kris@FreeBSD.org>2001-07-19 20:05:28 +0000
commit18cbcd5effa4ebab72f9f535e44a5fbef433d087 (patch)
treeb2d3a3c4344c814837ab109307bb7509bb253496 /crypto/openssl/ssl
parent84fabcda925860c067e7f03b07d3a988add59e0b (diff)
downloadFreeBSD-src-18cbcd5effa4ebab72f9f535e44a5fbef433d087.zip
FreeBSD-src-18cbcd5effa4ebab72f9f535e44a5fbef433d087.tar.gz
Resolve conflicts
Diffstat (limited to 'crypto/openssl/ssl')
-rw-r--r--crypto/openssl/ssl/s2_srvr.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/crypto/openssl/ssl/s2_srvr.c b/crypto/openssl/ssl/s2_srvr.c
index 2f3ec61..13a9f88 100644
--- a/crypto/openssl/ssl/s2_srvr.c
+++ b/crypto/openssl/ssl/s2_srvr.c
@@ -407,12 +407,13 @@ static int get_client_master_key(SSL *s)
/* bad decrypt */
#if 1
/* If a bad decrypt, continue with protocol but with a
- * dud master secret */
+ * random master secret (Bleichenbacher attack) */
if ((i < 0) ||
((!is_export && (i != EVP_CIPHER_key_length(c)))
|| (is_export && ((i != ek) || (s->s2->tmp.clear+i !=
EVP_CIPHER_key_length(c))))))
{
+ ERR_clear_error();
if (is_export)
i=ek;
else
OpenPOWER on IntegriCloud