diff options
author | Gordon Tetlow <gordon@FreeBSD.org> | 2024-09-04 03:56:17 +0000 |
---|---|---|
committer | Gordon Tetlow <gordon@FreeBSD.org> | 2024-09-04 03:56:17 +0000 |
commit | 108164cf95d9594884c2dcccba2691335e6f221b (patch) | |
tree | 4e7056d88b26a82672d06a7aca8052b58615ca2f /include/openssl/tls1.h | |
parent | e60dbfd00b009d424dfc5446d132872c93dd0aed (diff) |
openssl: Import OpenSSL 3.0.15.vendor/openssl/3.0.15vendor/openssl-3.0
This release incorporates the following bug fixes and mitigations:
- Fixed possible denial of service in X.509 name checks ([CVE-2024-6119])
- Fixed possible buffer overread in SSL_select_next_proto() ([CVE-2024-5535])
Release notes can be found at:
https://openssl-library.org/news/openssl-3.0-notes/index.html
Diffstat (limited to 'include/openssl/tls1.h')
-rw-r--r-- | include/openssl/tls1.h | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/include/openssl/tls1.h b/include/openssl/tls1.h index d6e9331fa1e9..91558fa8d1a5 100644 --- a/include/openssl/tls1.h +++ b/include/openssl/tls1.h @@ -1,5 +1,5 @@ /* - * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved. + * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved. * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved * Copyright 2005 Nokia. All rights reserved. * @@ -210,6 +210,8 @@ extern "C" { # define TLSEXT_max_fragment_length_1024 2 # define TLSEXT_max_fragment_length_2048 3 # define TLSEXT_max_fragment_length_4096 4 +/* OpenSSL value for unset maximum fragment length extension */ +# define TLSEXT_max_fragment_length_UNSPECIFIED 255 int SSL_CTX_set_tlsext_max_fragment_length(SSL_CTX *ctx, uint8_t mode); int SSL_set_tlsext_max_fragment_length(SSL *ssl, uint8_t mode); |