Mirrors/libwebsockets
1
0
Fork 0
mirror of https://github.com/warmcat/libwebsockets.git synced 2025-03-30 00:00:16 +01:00
Code Issues Releases Wiki Activity

Prevent SSL downgrade during redirect

Browse source
This commit is contained in:
Silas Parker 2017-02-22 11:25:47 +00:00 • committed by Andy Green
parent 3db9eca06a
commit 2e1dcc542e
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
lib/client.c
View file

@ -521,6 +521,13 @@ lws_client_interpret_server_handshake(struct lws *wsi)
} }
} }
#ifdef LWS_OPENSSL_SUPPORT
if (wsi->use_ssl && !ssl) {
cce = "HS: Redirect attempted SSL downgrade";
goto bail3;
}
#endif
if (!lws_client_reset(&wsi, ssl, ads, port, path, ads)) { if (!lws_client_reset(&wsi, ssl, ads, port, path, ads)) {
/* there are two ways to fail out with NULL return... /* there are two ways to fail out with NULL return...
* simple, early problem where the wsi is intact, or * simple, early problem where the wsi is intact, or