Change Post Handshake auth so that it is opt-in
authorMatt Caswell <matt@openssl.org>
Mon, 13 Aug 2018 14:23:27 +0000 (15:23 +0100)
committerMatt Caswell <matt@openssl.org>
Mon, 20 Aug 2018 14:14:01 +0000 (15:14 +0100)
commit32097b33bdff520d149ad6c8a11bd344e4ef764b
treec46929e459ee7c2688765c56afbf329f38a6edda
parent756510c102885005c2fc31eb01e3a6b95f8ed985
Change Post Handshake auth so that it is opt-in

Having post handshake auth automatically switched on breaks some
applications written for TLSv1.2. This changes things so that an explicit
function call is required for a client to indicate support for
post-handshake auth.

Fixes #6933.

Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6938)
15 files changed:
apps/s_client.c
doc/man1/s_client.pod
doc/man3/SSL_CTX_set_verify.pod
include/openssl/ssl.h
ssl/ssl_lib.c
ssl/ssl_locl.h
ssl/statem/extensions_clnt.c
test/handshake_helper.c
test/recipes/70-test_tls13messages.t
test/ssl-tests/26-tls13_client_auth.conf
test/ssl-tests/26-tls13_client_auth.conf.in
test/ssl_test_ctx.c
test/ssl_test_ctx.h
test/sslapitest.c
util/libssl.num