Support for encrypted change cipher spec messages added

This commit is contained in:
Simon Rozman 2016-08-17 09:26:46 +02:00
parent a02d1e7094
commit c69316071f

View File

@ -812,7 +812,12 @@ void eap::method_tls::process_packet(_In_bytecount_(size_pck) const void *_pck,
// Process TLS message. // Process TLS message.
switch (hdr->type) { switch (hdr->type) {
case tls_message_type_change_cipher_spec: case tls_message_type_change_cipher_spec:
process_change_cipher_spec(msg, msg_end - msg); if (m_state_server.m_alg_encrypt) {
sanitizing_blob msg_dec(msg, msg_end);
decrypt_message(hdr->type, msg_dec);
process_change_cipher_spec(msg_dec.data(), msg_dec.size());
} else
process_change_cipher_spec(msg, msg_end - msg);
break; break;
case tls_message_type_alert: case tls_message_type_alert: