diff options
| author | mckev@amazon.com <mckev@amazon.com@4ff67af0-8c30-449e-8e8b-ad334ec8d88c> | 2013-06-22 00:20:06 +0000 |
|---|---|---|
| committer | mckev@amazon.com <mckev@amazon.com@4ff67af0-8c30-449e-8e8b-ad334ec8d88c> | 2013-06-22 00:20:06 +0000 |
| commit | 8f54aac19a36d72ea630c813cae51c81a3cc0d78 (patch) | |
| tree | 6c042d009d49caf44cacac20cfb8becb2ce90994 /README.chromium | |
| parent | 39898464beeee474c11348ba7171637a4825e1a1 (diff) | |
| download | openssl-8f54aac19a36d72ea630c813cae51c81a3cc0d78.tar.gz | |
Under some circumstances, certain TLS connections are dropped by certain
remote servers when the TLS ClientHello record exceeds 256 bytes.
This patch changes the number of ECC formats advertised in the ClientHello
to exactly match the same formats advertised by the desktop version of
Chromium during TLS negotiation, netting a savings of approximately 50
bytes in the ClientHello record. This effectively eliminates the occurrence
of the issue.
Patch is named with a 'z' to ensure it is applied after the other patches
in the folder when import_from_android.sh is run, since that script processes
patches in alphabetical order.
R=digit@chromium.org,wtc@chromium.org
BUG:chromium:245500
TEST:
1. With V25, Visit http://campusstatebank.com
2. Enter a fictitious username and click "Submit"
3. The "processing login" page appears.
4. Nothing happens. In some cases, the logo will fail to show.
5. With the proposed patch applied, visit http://campusstatebank.com
6. Enter a fictitious username and click "Submit"
7. The "processing login" page appears.
8. The browser is redirected to a page where the password can be entered.
Contributed by mckev@amazon.com
Review URL: https://chromiumcodereview.appspot.com/17425002
git-svn-id: http://src.chromium.org/svn/trunk/deps/third_party/openssl@207965 4ff67af0-8c30-449e-8e8b-ad334ec8d88c
Diffstat (limited to 'README.chromium')
| -rw-r--r-- | README.chromium | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/README.chromium b/README.chromium index 36b1480..6e49163 100644 --- a/README.chromium +++ b/README.chromium @@ -176,6 +176,10 @@ located in patches.chromium/. Currently this consists of: Exclude the source files bn_asm.c and rc4_skey.c for x86_64 because they are replaced by x86_64-gcc.c and rc4-x86_64.S. + z_reduce_client_hello_size.patch + Advertise support of only the NIST curves P-521, P-384, and P-256, + as well as only uncompressed points, to keep ClientHello small. + ************************************************************************** Adding new Chromium patches: |