Hi all,
I have found that there is a serious bug located in the static
function ssl3_get_record in s3_pkt.c. The fault is that the function NEVER gets
the version number of SSL and MUST returns "wrong version number" error. That
means if I create SSL_CTX with SSLv3_method, then I get "wrong version number"
error for all connections. (Very non-sense) Please let me know how to fix it.
Thanks
Regards,
|
- Re: Serious Bug in ssl3_get_record Fung
- Re: Serious Bug in ssl3_get_record Bodo Moeller
- Re: Serious Bug in ssl3_get_record Bodo Moeller
- Re: Serious Bug in ssl3_get_record Jeffrey Altman
- Re: Serious Bug in ssl3_get_record Fung
- Re: Serious Bug in ssl3_get_record Michael Lee