openssl/ssl
Benjamin Kaduk ddd99d52d3 statem: always save sigalgs during PHA
We use the same extension-parsing function on server and client
for convenience, but while the server might worry about tracking
what was previously received and not overwriting it, on the client
receiving a request for post-handshake authentication, we always
want to use the values from the current extension (and should
always have a new session object that we are free to mutate).

It is somewhat unclear whether the server also needs the check
for a resumed connection; it appears to have been added back in
2015 in commit 062178678f as part
of a broad pass to handle extensions on resumption, but without
specific documentation of each extension's handling.

Fixes: #10370

Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24651)
2025-04-01 15:10:54 +02:00
..
quic port_init(): Security hardening for token key 2025-03-27 10:44:09 +01:00
record Memory leak fix ktls_meth.c 2025-03-25 20:22:23 +01:00
rio Copyright year updates 2025-03-12 13:35:59 +00:00
statem statem: always save sigalgs during PHA 2025-04-01 15:10:54 +02:00
bio_ssl.c Copyright year updates 2025-03-12 13:35:59 +00:00
build.info Move ssl_err.c into libcrypto 2025-03-01 14:46:03 -05:00
d1_lib.c Copyright year updates 2025-03-12 13:35:59 +00:00
d1_msg.c Copyright year updates 2025-03-12 13:35:59 +00:00
d1_srtp.c Copyright year updates 2025-03-12 13:35:59 +00:00
methods.c
pqueue.c
priority_queue.c Copyright year updates 2024-09-05 09:35:49 +02:00
s3_enc.c Copyright year updates 2025-03-12 13:35:59 +00:00
s3_lib.c Fix the use of CCM ciphersuites with QUIC TLS API 2025-03-20 11:24:26 +01:00
s3_msg.c Copyright year updates 2025-03-12 13:35:59 +00:00
ssl_asn1.c
ssl_cert.c Copyright year updates 2025-03-12 13:35:59 +00:00
ssl_cert_comp.c Copyright year updates 2025-03-12 13:35:59 +00:00
ssl_cert_table.h
ssl_ciph.c Copyright year updates 2025-03-12 13:35:59 +00:00
ssl_conf.c Copyright year updates 2025-03-12 13:35:59 +00:00
ssl_err_legacy.c Copyright year updates 2025-03-12 13:35:59 +00:00
ssl_init.c Copyright year updates 2025-03-12 13:35:59 +00:00
ssl_lib.c Move the Handshake read secret change earlier in the process for QUIC 0-RTT 2025-03-20 20:22:39 +01:00
ssl_local.h Fix sigalg corner cases 2025-03-31 14:07:56 +02:00
ssl_mcnf.c Copyright year updates 2024-09-05 09:35:49 +02:00
ssl_rsa.c Copyright year updates 2025-03-12 13:35:59 +00:00
ssl_rsa_legacy.c Copyright year updates 2025-03-12 13:35:59 +00:00
ssl_sess.c Copyright year updates 2025-03-12 13:35:59 +00:00
ssl_stat.c Copyright year updates 2025-03-12 13:35:59 +00:00
ssl_txt.c Copyright year updates 2024-09-05 09:35:49 +02:00
ssl_utst.c
t1_enc.c Copyright year updates 2025-03-12 13:35:59 +00:00
t1_lib.c Fix sigalg corner cases 2025-03-31 14:07:56 +02:00
t1_trce.c Copyright year updates 2025-03-12 13:35:59 +00:00
tls13_enc.c Copyright year updates 2025-03-12 13:35:59 +00:00
tls_depr.c Copyright year updates 2025-03-12 13:35:59 +00:00
tls_srp.c Copyright year updates 2025-03-12 13:35:59 +00:00