Validate legacy_version
authorMatt Caswell <matt@openssl.org>
Thu, 19 Jul 2018 15:51:58 +0000 (16:51 +0100)
committerMatt Caswell <matt@openssl.org>
Fri, 20 Jul 2018 09:52:02 +0000 (10:52 +0100)
commitd8434cf85691f32a17dcdfed6e81769a001074dd
tree60081d7183d042598d3ba886ab9f607b41d2c354
parentd6ce9da49b131cad85da8c94c617febf6c8d9073
Validate legacy_version

The spec says that a client MUST set legacy_version to TLSv1.2, and
requires servers to verify that it isn't SSLv3.

Fixes #6600

Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6747)
crypto/err/openssl.txt
include/openssl/sslerr.h
ssl/ssl_err.c
ssl/statem/statem_lib.c
test/recipes/70-test_sslversions.t