You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
69ac637fbb
Fixed an authentication bypass issue in SSL/TLS. When the TLS authentication mode was set to 'optional', mbedtls_ssl_get_verify_result() would incorrectly return 0 when the peer's X.509 certificate chain had more than MBEDTLS_X509_MAX_INTERMEDIATE_CA intermediates (default: 8), even when it was not trusted. This could be triggered remotely on both the client and server side. (Note, with the authentication mode set by mbedtls_ssl_conf_authmode()to be 'required' (the default), the handshake was correctly aborted). Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk> Tested-by: Magnus Kroken <mkroken@gmail.com> |
7 years ago | |
|---|---|---|
| .. | ||
| argp-standalone | 8 years ago | |
| cyassl | 7 years ago | |
| elfutils | 7 years ago | |
| gettext | 7 years ago | |
| gettext-full | 7 years ago | |
| gmp | 8 years ago | |
| libbsd | 8 years ago | |
| libconfig | 8 years ago | |
| libevent2 | 8 years ago | |
| libiconv | 7 years ago | |
| libiconv-full | 8 years ago | |
| libjson-c | 7 years ago | |
| libmnl | 8 years ago | |
| libnetfilter-conntrack | 8 years ago | |
| libnetfilter-cthelper | 8 years ago | |
| libnetfilter-cttimeout | 8 years ago | |
| libnetfilter-log | 8 years ago | |
| libnetfilter-queue | 8 years ago | |
| libnfnetlink | 8 years ago | |
| libnftnl | 7 years ago | |
| libnl | 7 years ago | |
| libnl-tiny | 8 years ago | |
| libpcap | 7 years ago | |
| libroxml | 8 years ago | |
| librpc | 8 years ago | |
| libtool | 7 years ago | |
| libubox | 7 years ago | |
| libunwind | 7 years ago | |
| libusb | 8 years ago | |
| libusb-compat | 8 years ago | |
| lzo | 7 years ago | |
| mbedtls | 7 years ago | |
| ncurses | 7 years ago | |
| nettle | 8 years ago | |
| openssl | 7 years ago | |
| popt | 8 years ago | |
| readline | 7 years ago | |
| sysfsutils | 8 years ago | |
| toolchain | 7 years ago | |
| uclibc++ | 7 years ago | |
| uclient | 7 years ago | |
| ustream-ssl | 7 years ago | |
| zlib | 7 years ago | |