]> Cypherpunks repositories - gostls13.git/commit
crypto/tls: allow larger initial records.
authorAdam Langley <agl@golang.org>
Mon, 23 Feb 2015 22:51:40 +0000 (14:51 -0800)
committerAdam Langley <agl@golang.org>
Tue, 24 Feb 2015 19:39:36 +0000 (19:39 +0000)
commit8f8d066bfd86c736e35f1c0e36ae01fb0bdd7190
tree920f0e566c7e42260f21b96be08ee7baac81b5fc
parentc2317db2f9bf9f097f0bc297004a8f581b944206
crypto/tls: allow larger initial records.

Some servers which misunderstood the point of the CertificateRequest
message send huge reply records. These records are large enough that
they were considered “insane” by the TLS code and rejected.

This change removes the sanity test for record lengths. Although the
maxCiphertext test still remains, just above, which (roughly) enforces
the 16KB protocol limit on record sizes:
https://tools.ietf.org/html/rfc5246#section-6.2.1

Fixes #8928.

Change-Id: Idf89a2561b1947325b7ddc2613dc2da638d7d1c9
Reviewed-on: https://go-review.googlesource.com/5690
Reviewed-by: Andrew Gerrand <adg@golang.org>
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
src/crypto/tls/conn.go