Skip to content

Commit c52273d

Browse files
Add a note about badmac_seen's new name in ssl_context_info
Signed-off-by: Gilles Peskine <[email protected]>
1 parent 55151d3 commit c52273d

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

programs/ssl/ssl_context_info.c

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -743,6 +743,13 @@ static void print_deserialized_ssl_session(const uint8_t *ssl, uint32_t len,
743743
* uint8 alpn_chosen_len;
744744
* uint8 alpn_chosen<0..2^8-1> // ALPN: negotiated application protocol
745745
*
746+
* Note: In the mbedtls_ssl_context structure, badmac_seen is called
747+
* badmac_seen_or_in_hsfraglen since Mbed TLS 3.6.2. The field contains
748+
* the badmac_seen value in DTLS, and a handshake parsing intermediate
749+
* value in non-DTLS TLS. The value is only meaningful for DTLS and should
750+
* not be saved in non-DTLS TLS, so in this program, the context info file
751+
* filed remains badmac_seen.
752+
*
746753
* /p ssl pointer to serialized session
747754
* /p len number of bytes in the buffer
748755
*/

0 commit comments

Comments
 (0)