Mbed-TLS/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-09-27 04:27:24 +00:00
Code Issues Packages Projects Releases Wiki Activity

State globally that the limitations don't apply to DTLS

Browse Source 
Signed-off-by: Gilles Peskine <[email protected]>
This commit is contained in:
Gilles Peskine
2025-03-12 10:55:47 +01:00
parent bc0255592f
commit 858900656e
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
include/mbedtls/ssl.h
+4 -3
View File
@@ -4984,8 +4984,10 @@ int mbedtls_ssl_get_session(const mbedtls_ssl_context *ssl,
* be the case even if TLS 1.3 is offered but eventually * be the case even if TLS 1.3 is offered but eventually
* not selected). * not selected).
* *
* \note Defragmentation of incoming handshake messages in TLS * \note In TLS, reception of fragmented handshake messages is
* is supported with some limitations: * supported with some limitations (those limitations do
* not apply to DTLS, where defragmentation is fully
* supported):
* - On an Mbed TLS server that only accepts TLS 1.2, * - On an Mbed TLS server that only accepts TLS 1.2,
* the initial ClientHello message must not be fragmented. * the initial ClientHello message must not be fragmented.
* A TLS 1.2 ClientHello may be fragmented if the server * A TLS 1.2 ClientHello may be fragmented if the server
@@ -4993,7 +4995,6 @@ int mbedtls_ssl_get_session(const mbedtls_ssl_context *ssl,
* that #MBEDTLS_SSL_PROTO_TLS1_3 enabled, and the * that #MBEDTLS_SSL_PROTO_TLS1_3 enabled, and the
* accepted versions have not been restricted with * accepted versions have not been restricted with
* mbedtls_ssl_conf_max_tls_version() or the like). * mbedtls_ssl_conf_max_tls_version() or the like).
* This limitation does not apply to DTLS.
* - The first fragment of a handshake message must be * - The first fragment of a handshake message must be
* at least 4 bytes long. * at least 4 bytes long.
* - Non-handshake records must not be interleaved between * - Non-handshake records must not be interleaved between