ID: 38
Name: SSL_Updates_742
Version: 1.05
Dependences: none
Description: Version 1.0@@@This change fixes a memory leak when using naSslNgConnect.  About 1500 bytes of memory would be lost every time we made a client connection. Case 30656@@@Version 1.01@@@Updated https_daemon function to start tls_server_http with correct variable and thread.   After the maximum tls_server_http threads had been started, it sometimes reset incorrect connection info and restarted the tls_server_http thread. Case 31362.@@@Version 1.02@@@Fixed memory leak in tls_handshake_protocol_receive_certificate_request.  The function calls d2i_X509_NAME to extract data from the input stream. d2i_X509_NAME returns the data in an allocated buffer which tls_handshake_protocol_receive_certificate_request was not freeing. Fixed it by having the function free the buffer when it finishes with it.   Case 34780.@@@Version 1.03@@@Removed erroneous comment from nasslclient example root.c file.@@@Version 1.04@@@HTTPS transactions were found to be quite slow. A recv call in function recv_with_timeout was performing non-blocking recvs without a select and just performing a one second sleep between recv calls. A select call was added and this reduced the amount of time sleeping. This greatly reduced the time to complete an SSL handshake transaction.@@@Version 1.05@@@Mitigates the Poodle SSL attack by blocking any SSLv3 connection attempts. (NETOS-105)
Version 1.1
Updated https_daemon function to start tls_server_http with correct variable and thread.   After the maximum tls_server_http threads had been started, it sometimes reset incorrect connection info and restarted the tls_server_http thread. Case 31362.@@@
Minidescription: SSL Updates for NET+OS 7.4.2
platformversion: 7.4
Revision: 2
platform: netos
Relevance: NORMAL
Filename: SSL_Updates_742_38.dipk
Date: 12/11/2014
Type: fix
Target: environment
neededfiles: none
rootfs: none
Size: 628kb
Installedsize: 1609kb
Checksum: 8e99603fd6f249d4c7847c61ab1aaf14
