Displaying 3 results from an estimated 3 matches for "ssl_proxy_flush".
2015 Apr 24
3
[patch] TLS Handshake failures can crash imap-login
...dshake() is called. There SSL_accept() is called. If
SSL_accept failes - because a client sent an invalid packet or
something the server doesn't support or any other reason -
ssl_handle_error() will be called.
ssl_handle_error() will call ssl_proxy_destroy().
ssl_proxy_destroy() will then call ssl_proxy_flush(). And
ssl_proxy_flush will call ssl_step() again. Here we have a loop. Now
when SSL_accept() gets called again on the same context this is an
invalid state for OpenSSL and it crashes.
What to do? In essence, if ssl_proxy_destroy is called it shouldn't try
to finish the handshake if the handsh...
2015 Mar 21
2
imap-login SSLv3 causes signal 11, core dump and DoS. ssl_protocols = ??
...0) (optimized), at 0xfea09f07 (line ~990)
in "ssl_lib.c"
[4] ssl_handshake(proxy = 0x809ba38) (optimized), at 0xfee35c18 (line
~481) in "ssl-proxy-openssl.c"
[5] ssl_step(proxy = 0x809ba38) (optimized), at 0xfee35ee0 (line
~545) in "ssl-proxy-openssl.c"
[6] ssl_proxy_flush(proxy = 0x809ba38) (optimized), at 0xfee3680c
(line ~817) in "ssl-proxy-openssl.c"
[7] ssl_proxy_destroy(proxy = 0x809ba38) (optimized), at 0xfee3686b
(line ~825) in "ssl-proxy-openssl.c"
[8] ssl_handle_error(proxy = 0x809ba38, ret = -1, func_name =
0xfee3b2d8 "SSL...
2015 Mar 20
2
imap-login SSLv3 causes signal 11, core dump and DoS. ssl_protocols = ??
Connecting to dovecot with ssl3 causes imap-login to die:
$ openssl s_client -connect localhost:993 -ssl3
CONNECTED(00000003)
4277630796:error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert
handshake failure:s3_pkt.c:1461:SSL alert number 40
4277630796:error:1409E0E5:SSL routines:ssl3_write_bytes:ssl handshake
failure:s3_pkt.c:645:
---
no peer certificate available
---
No client certificate