stv0g/libwebsockets
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Prevent SSL downgrade during redirect

Browse source
This commit is contained in:
Silas Parker 2017-02-22 11:25:47 +00:00 • committed by Andy Green
parent 3db9eca06a
commit 2e1dcc542e
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
lib/client.c
View file

@ -521,6 +521,13 @@ lws_client_interpret_server_handshake(struct lws *wsi)
}
}
#ifdef LWS_OPENSSL_SUPPORT
if (wsi->use_ssl && !ssl) {
cce = "HS: Redirect attempted SSL downgrade";
goto bail3;
}
#endif
if (!lws_client_reset(&wsi, ssl, ads, port, path, ads)) {
/* there are two ways to fail out with NULL return...
* simple, early problem where the wsi is intact, or