Improve fallback protection
authorMatt Caswell <matt@openssl.org>
Wed, 8 Aug 2018 13:21:33 +0000 (14:21 +0100)
committerMatt Caswell <matt@openssl.org>
Thu, 9 Aug 2018 09:53:09 +0000 (10:53 +0100)
commit5df2206048d812c493d441701d55f75bdde2995d
treeaf666b3d05406cce1cbe6cb4ba53d75f37241211
parentf460e8396f8cb1be1bbd6a8a22d7e24b80d8a607
Improve fallback protection

A client that has fallen back could detect an inappropriate fallback if
the TLSv1.3 downgrade protection sentinels are present.

Fixes #6756

Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6894)
ssl/statem/statem_lib.c