Skip to content
GitLab
  1. 02 Sep, 2013 1 commit
  3. 22 Oct, 2012 1 commit
    • Linus Nordberg's avatar
      Don't mix up pre- and post-handshake verification of DTLS clients. · 3682c935
      Linus Nordberg authored 
      Commit db965c9b addressed TLS clients only.

When verifying DTLS clients, don't consider config blocks with CA
settings ('tls') which differ from the one used for verifying the
certificate chain.

Original issue reported and analysed by Ralf Paffrath. DTLS being
vulnerable reported by Raphael Geisser.

Addresses issue RADSECPROXY-43, CVE-2012-4523.
      3682c935
  5. 17 Apr, 2012 1 commit
  7. 11 Apr, 2012 1 commit
  9. 26 Sep, 2011 1 commit
  11. 23 Mar, 2010 1 commit
  13. 08 Mar, 2010 1 commit
  15. 27 Jan, 2009 1 commit
  17. 07 Jan, 2009 1 commit
  19. 22 Dec, 2008 1 commit
  21. 19 Dec, 2008 3 commits
  23. 18 Dec, 2008 1 commit
  25. 24 Sep, 2008 1 commit
  27. 23 Sep, 2008 1 commit
  29. 17 Sep, 2008 3 commits
  31. 16 Sep, 2008 2 commits
  33. 14 Sep, 2008 1 commit
  35. 13 Sep, 2008 1 commit
  37. 11 Sep, 2008 1 commit
  39. 22 Aug, 2008 1 commit
  41. 21 Aug, 2008 4 commits