Fix two bugs in clienthello processing
authorEmilia Kasper <emilia@openssl.org>
Mon, 4 Jul 2016 18:32:28 +0000 (20:32 +0200)
committerEmilia Kasper <emilia@openssl.org>
Tue, 19 Jul 2016 12:18:03 +0000 (14:18 +0200)
commit70c22888c1648fe8652e77107f3c74bf2212de36
tree009ea0932b1ae55cd0063c77d0549b66d2fdd3e7
parentce2cdac2787da32bcde210c7d6acdcbe41b1cd40
Fix two bugs in clienthello processing

- Always process ALPN (previously there was an early return in the
  certificate status handling)
- Don't send a duplicate alert. Previously, both
  ssl_check_clienthello_tlsext_late and its caller would send an
  alert. Consolidate alert sending code in the caller.

Reviewed-by: Rich Salz <rsalz@openssl.org>
ssl/ssl_locl.h
ssl/statem/statem_srvr.c
ssl/t1_lib.c