Merge remote-tracking branch 'asn/bug4312'

2024-12-06 19:41:15 +01:00 · 2011-11-25 17:00:47 -05:00
parent b1bd30c24c 406ae1ba5a
commit e5f2f10844
6 changed files with 140 additions and 82 deletions
@@ -0,0 +1,11 @@
+  o Security fixes:
+
+    - Block excess renegotiations even if they are RFC5746 compliant.
+      This mitigates potential SSL Denial of Service attacks that use
+      SSL renegotiation as a way of forcing the server to perform
+      unneeded computationally expensive SSL handshakes. Implements
+      #4312.
+
+    - Fix a bug where tor would not notice excess renegotiation
+      attempts before it received the first data SSL record. Fixes
+      part of #4312.