Uploaded image for project: 'MINA'
  1. MINA
  2. DIRMINA-880

Implementation of SslFilter#isCloseNotify() is incorrect

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 2.0.4
    • Fix Version/s: 2.0.5
    • Component/s: Filter
    • Labels:
      None
    • Environment:
      RHEL 5.6

      Description

      SslFilter#isCloseNotify() shouldn't probe for the 4th byte as its value may vary. Current implementation doesn't also cover SSL 3.0/TLS 1.1/TLS 1.2. I've created a patch that I believe has it right. Note that probes for SSL 2.0 are intentionally excluded as SSL 2.0 use has been prohibited by RFC 6176.

        Attachments

        1. isCloseNotify.patch
          1 kB
          Dimitar Mavrodiev

          Activity

            People

            • Assignee:
              elecharny Emmanuel L├ęcharny
              Reporter:
              dharkhan Dimitar Mavrodiev
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: