CVSROOT:        /cvs
Module name:    src
Changes by:     [email protected]    2019/04/05 14:23:38

Modified files:
        lib/libssl     : tls13_client.c tls13_handshake.c 
                         tls13_handshake.h tls13_internal.h 

Log message:
By design, our state machine is a DAG contrary to the state machine in
the spec. To avoid the obvious loop in the RFC's state machine, we added
a CLIENT_HELLO_RETRY state which is a second ClientHello with special
rules.  There is, however, no state to react to this second client hello.
This adds a matching SERVER_HELLO_RETRY state to the handshakes table.

This means in particular that the WITH_HRR state cannot be set in
tls13_server_hello_recv(), so remove this now dead check.

ok jsing

Reply via email to