This is an actual bug that has been plagueing "test set 9" (p2p tls) for
a while - actually one of at least 3 different p2p tls handshake bugs
uncovered by it :-) - much more details in the actually commit message.
This has been in the code really forever, but since it is only triggerable
if the other end is misbehaving (due to the other bug with incoming TCP
sockets) *and* it does not break things beyond "handshake can fail *if*
the other end is misbehaving", fixing in 2.7 + master should be enough
(tell me if I should backport further).
Tested on my t_server bench, with "master + this" on the client and
"2.7 + this" on the server side.
Your patch has been applied to the master and release/2.7 branch.
commit f264f6274b1696d28b277f5dd0fa93d889eb6f80 (master)
commit 1a687fdeda1d96dfdb4bff41b445211604923642 (release/2.7)
Author: Frank Lichtenheld
Date: Wed Aug 5 15:43:36 2026 +0200
ssl: Do not queue control ciphertext while a packet is still queued
Signed-off-by: Frank Lichtenheld <[email protected]>
Acked-by: Arne Schwabe <[email protected]>
Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1831
Message-Id: <[email protected]>
URL:
https://www.mail-archive.com/[email protected]/msg38133.html
Signed-off-by: Gert Doering <[email protected]>
--
kind regards,
Gert Doering
_______________________________________________
Openvpn-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-devel
