Use a fetched MD if appropriate in ssl3_cbc_digest_record
authorMatt Caswell <matt@openssl.org>
Sat, 18 Apr 2020 10:54:23 +0000 (11:54 +0100)
committerMatt Caswell <matt@openssl.org>
Mon, 20 Apr 2020 10:29:31 +0000 (11:29 +0100)
commit73d391ad139b6744fa16fb8be1813b2f7ec8f6c0
tree62106895832e485b9d556d460757c6f12f7acc52
parent682bc861a92d09fb5155cd1aceee7b1ce298ddb9
Use a fetched MD if appropriate in ssl3_cbc_digest_record

HMACs used via the legacy EVP_DigestSign interface are strange in
that they use legacy codepath's which eventually (under the covers)
transform the operation into a new style EVP_MAC. This can mean the
digest in use can be a legacy one, so we need to be careful with any
digest we extract from the ctx.

Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/11511)
ssl/record/ssl3_record.c
ssl/s3_cbc.c
ssl/ssl_local.h