Open Bug 1590055 Opened 6 years ago Updated 4 years ago

SSL_SetDowngradeCheckVersion checks version range

Categories

(NSS :: Libraries, defect, P3)

Product:
NSS
Component:
Libraries
Type:
defect

Tracking

(Not tracked)

People

(Reporter: mt, Unassigned)

Details

SSL_SetDowngradeCheckVersion fails if the version is lower than the maximum configured version: https://searchfox.org/nss/rev/59e89ba4e2be98e9bb59b3212a360cf675db43f3/lib/ssl/sslsock.c#2859

This has the unfortunate effect of making the order that socket configuration calls are made significant. No other configuration function is interdependent in this way. Though this might allow for nonsensical outcomes, this function might be better configured independently, with a sanity check on the value before connecting.

Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.