espressif/mbedtls
1
0
Fork 0
mirror of https://github.com/espressif/mbedtls.git synced 2025-05-11 12:32:15 +08:00
Code Issues Packages Projects Releases Wiki Activity

ClientHello may be fragmented in renegotiation

Browse Source 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
This commit is contained in:
Gilles Peskine 2025-03-11 13:47:14 +01:00
parent 494e4943b5
commit c3af2f48c4
1 changed files with 0 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
include/mbedtls/ssl.h
View File

@ -4993,8 +4993,6 @@ int mbedtls_ssl_get_session(const mbedtls_ssl_context *ssl,
* that #MBEDTLS_SSL_PROTO_TLS1_3 enabled, and the * that #MBEDTLS_SSL_PROTO_TLS1_3 enabled, and the
* accepted versions have not been restricted with * accepted versions have not been restricted with
* mbedtls_ssl_conf_max_tls_version() or the like). * mbedtls_ssl_conf_max_tls_version() or the like).
* - A ClientHello message that initiates a renegotiation
* must not be fragmented.
* - The first fragment of a handshake message must be * - The first fragment of a handshake message must be
* at least 4 bytes long. * at least 4 bytes long.
* - Non-handshake records must not be interleaved between * - Non-handshake records must not be interleaved between