summaryrefslogtreecommitdiff
path: root/crypto/openssl/bugs/sslref.dif
diff options
context:
space:
mode:
authorcvs2svn <cvs2svn@FreeBSD.org>2004-03-17 12:11:09 +0000
committercvs2svn <cvs2svn@FreeBSD.org>2004-03-17 12:11:09 +0000
commite787e57d2fcf53c0141dcfdc5974bd8a706f0308 (patch)
tree086fb6b3d3e003caef8aabe591caecaedc86210a /crypto/openssl/bugs/sslref.dif
parent81ac585294418460a598ae2c6d3eeaf0d993b18a (diff)
Notes
Diffstat (limited to 'crypto/openssl/bugs/sslref.dif')
-rw-r--r--crypto/openssl/bugs/sslref.dif26
1 files changed, 0 insertions, 26 deletions
diff --git a/crypto/openssl/bugs/sslref.dif b/crypto/openssl/bugs/sslref.dif
deleted file mode 100644
index 0aa92bfe6de8..000000000000
--- a/crypto/openssl/bugs/sslref.dif
+++ /dev/null
@@ -1,26 +0,0 @@
-The February 9th, 1995 version of the SSL document differs from
-https://www.netscape.com in the following ways.
-=====
-The key material for generating a SSL_CK_DES_64_CBC_WITH_MD5 key is
-KEY-MATERIAL-0 = MD5[MASTER-KEY,"0",CHALLENGE,CONNECTION-ID]
-not
-KEY-MATERIAL-0 = MD5[MASTER-KEY,CHALLENGE,CONNECTION-ID]
-as specified in the documentation.
-=====
-From the section 2.6 Server Only Protocol Messages
-
-If the SESSION-ID-HIT flag is non-zero then the CERTIFICATE-TYPE,
-CERTIFICATE-LENGTH and CIPHER-SPECS-LENGTH fields will be zero.
-
-This is not true for https://www.netscape.com. The CERTIFICATE-TYPE
-is returned as 1.
-=====
-I have not tested the following but it is reported by holtzman@mit.edu.
-
-SSLref clients wait to recieve a server-verify before they send a
-client-finished. Besides this not being evident from the examples in
-2.2.1, it makes more sense to always send all packets you can before
-reading. SSLeay was waiting in the server to recieve a client-finish
-before sending the server-verify :-). I have changed SSLeay to send a
-server-verify before trying to read the client-finished.
-