From be9c2dce5b5852638cd7bc515acaf7ff6c1d44fe Mon Sep 17 00:00:00 2001 From: Simon Butcher Date: Tue, 24 Jul 2018 13:01:59 +0100 Subject: [PATCH] Revise ChangeLog entry for empty data records fixes --- ChangeLog | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/ChangeLog b/ChangeLog index c6f030c8a6..72a5c278a6 100644 --- a/ChangeLog +++ b/ChangeLog @@ -21,11 +21,12 @@ Bugfix Philippe Antoine from Catena cyber. #1663. * Fix namespacing in header files. Remove the `mbedtls` namespacing in the `#include` in the header files. Resolves #857 - * Fix decryption of zero length messages (all padding) in some circumstances: - DTLS 1.0 and 1.2, and CBC ciphersuites using encrypt-then-MAC. Most often - seen when communicating with OpenSSL using TLS 1.0. Reported by @kFYatek - (#1632) and by Conor Murphy on the forum. Fix contributed by Espressif - Systems. + * Fix decryption for zero length messages (which contain all padding) when a + CBC based ciphersuite is used together with Encrypt-then-MAC. Previously, + such a message was wrongly reported as an invalid record and therefore lead + to the connection being terminated. Seen most often with OpenSSL using + TLS 1.0. Reported by @kFYatek and by Conor Murphy on the forum. Fix + contributed by Espressif Systems. Fixes #1632 * Fail when receiving a TLS alert message with an invalid length, or invalid zero-length messages when using TLS 1.2. Contributed by Espressif Systems. * Fix ssl_client2 example to send application data with 0-length content