Hi,
On 25/03/2021 18:44, Arne Schwabe wrote:
> These have been troublesome in the past and also today's CVE-2021-3449
> DOS is only exploitable if renegotiation is enabled.
>
> Signed-off-by: Arne Schwabe
> ---
> src/openvpn/ssl_mbedtls.c | 3 +++
> src/openvpn/ssl_openssl.c | 3 +++
> 2 files
Hi,
On 26/03/2021 12:03, Arne Schwabe wrote:
> Am 26.03.21 um 00:15 schrieb Antonio Quartulli:
>> Hi,
>>
>> On 25/03/2021 18:44, Arne Schwabe wrote:
>>> These have been troublesome in the past and also today's CVE-2021-3449
>>> DOS is only exploitable if renegotiation is enabled.
>>>
>>> Signed-of
Am 26.03.21 um 00:15 schrieb Antonio Quartulli:
> Hi,
>
> On 25/03/2021 18:44, Arne Schwabe wrote:
>> These have been troublesome in the past and also today's CVE-2021-3449
>> DOS is only exploitable if renegotiation is enabled.
>>
>> Signed-off-by: Arne Schwabe
>
> What is the practical effect
Hi,
On 25/03/2021 23:15, Antonio Quartulli wrote:
Hi,
On 25/03/2021 18:44, Arne Schwabe wrote:
These have been troublesome in the past and also today's CVE-2021-3449
DOS is only exploitable if renegotiation is enabled.
Signed-off-by: Arne Schwabe
What is the practical effect of this change
Hi,
On 25/03/2021 18:44, Arne Schwabe wrote:
> These have been troublesome in the past and also today's CVE-2021-3449
> DOS is only exploitable if renegotiation is enabled.
>
> Signed-off-by: Arne Schwabe
What is the practical effect of this change?
With the current code (before this patch) whe
These have been troublesome in the past and also today's CVE-2021-3449
DOS is only exploitable if renegotiation is enabled.
Signed-off-by: Arne Schwabe
---
src/openvpn/ssl_mbedtls.c | 3 +++
src/openvpn/ssl_openssl.c | 3 +++
2 files changed, 6 insertions(+)
diff --git a/src/openvpn/ssl_mbedtls
