Closed
Bug 1299792
Opened 9 years ago
Closed 9 years ago
ssl3_PickServerSignatureScheme() shouldn't send alerts
Categories
(NSS :: Libraries, defect)
NSS
Libraries
Tracking
(Not tracked)
RESOLVED
FIXED
3.27
People
(Reporter: ttaubert, Assigned: ttaubert)
References
Details
ssl3_PickServerSignatureScheme() is called by ssl3_SelectServerCert(). All call sites of the latter in ssl3con.c send alerts on failure, so ssl3_PickServerSignatureScheme() shouldn't send more alerts.
In tls13con.c we can end up with no alert because that relies on ssl3_SelectServerCert() sending those, but that doesn't send any in case we can't find a good matchin ss->serverCerts.
|
Assignee | |
Comment 1•9 years ago
|
||
Patch at: https://codereview.appspot.com/307180043
Flags: needinfo?(martin.thomson)
Flags: needinfo?(ekr)
|
|
Assignee | |
Comment 2•9 years ago
|
||
Status: ASSIGNED → RESOLVED
Closed: 9 years ago
Flags: needinfo?(martin.thomson)
Flags: needinfo?(ekr)
Resolution: --- → FIXED
Target Milestone: --- → 3.27
You need to log in
before you can comment on or make changes to this bug.
Description
•