diff options
| author | Todd Short <tshort@akamai.com> | 2017-08-18 09:32:29 -0400 |
|---|---|---|
| committer | Rich Salz <rsalz@openssl.org> | 2017-08-18 09:52:17 -0400 |
| commit | 10ed1b72391ded9853bec417d4d32bd6ec45f916 (patch) | |
| tree | 35c5637fa243c3febfce03a03807eac61f303faf /test | |
| parent | 326eaa941e03a8922a3789ccab0d134c63d05c92 (diff) | |
| download | openssl-10ed1b72391ded9853bec417d4d32bd6ec45f916.tar.gz | |
Reorder extensions to put SigAlgs last
Force non-empty padding extension.
When enabled, force the padding extension to be at least 1 byte long.
WebSphere application server cannot handle having an empty
extension (e.g. EMS/EtM) as the last extension in a client hello.
This moves the SigAlgs extension last for TLSv1.2 to avoid this
issue.
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/3921)
Diffstat (limited to 'test')
| -rw-r--r-- | test/sslapitest.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/test/sslapitest.c b/test/sslapitest.c index dfcbf11c90..571da55294 100644 --- a/test/sslapitest.c +++ b/test/sslapitest.c @@ -417,7 +417,7 @@ static int full_early_callback(SSL *s, int *al, void *arg) #ifndef OPENSSL_NO_EC 11, 10, #endif - 35, 13, 22, 23}; + 35, 22, 23, 13}; size_t len; /* Make sure we can defer processing and get called back. */ |