Skip to content

Comments

Fix check for TLS downgrade canary#337

Merged
mingyech merged 3 commits intomasterfrom
downgrade
Apr 20, 2025
Merged

Fix check for TLS downgrade canary#337
mingyech merged 3 commits intomasterfrom
downgrade

Conversation

@mingyech
Copy link
Member

Add TLS downgrade protection code from stdlib to uconn.clientHandshake. Also fix a related nil pointer dereference bug.

Closes #181

@mingyech mingyech merged commit f889276 into master Apr 20, 2025
3 checks passed
@mingyech mingyech deleted the downgrade branch April 21, 2025 00:25
syphyr pushed a commit to syphyr/obfs4 that referenced this pull request May 7, 2025
This is a temporary fix, and should be replaced with a more permanent solution in the earliest opportunity.

refraction-networking/utls#337
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Tls downgrade attack?

1 participant