diff options
| author | Kazuki Yamaguchi <[email protected]> | 2021-10-25 00:09:24 +0900 |
|---|---|---|
| committer | Kazuki Yamaguchi <[email protected]> | 2021-11-01 17:48:02 +0900 |
| commit | 1ac7f23bb8568b41e511bbe5dfc85c141cc8b2c2 (patch) | |
| tree | 47be3ba98451d90ac4b63b34fc2026a5726dc0e3 /ext/openssl/lib | |
| parent | f0226f9a017e288d1c91f7a1777996804784fb8a (diff) | |
[ruby/openssl] ssl: disallow reading/writing to unstarted SSL socket
OpenSSL::SSL::SSLSocket allowed #read and #write to be called before an
SSL/TLS handshake is completed. They passed unencrypted data to the
underlying socket.
This behavior is very odd to have in this library. A verbose mode
warning "SSL session is not started yet" was emitted whenever this
happened. It also didn't behave well with OpenSSL::Buffering. Let's
just get rid of it.
Fixes: https://github.com/ruby/openssl/issues/9
https://github.com/ruby/openssl/commit/bf780748b3
Diffstat (limited to 'ext/openssl/lib')
0 files changed, 0 insertions, 0 deletions