Michael Brown e80818e4f6 [tls] Disable renegotiation unless extended master secret is used ...

RFC 7627 states that renegotiation becomes no longer secure under
various circumstances when the non-extended master secret is used.
The description of the precise set of circumstances is spread across
various points within the document and is not entirely clear.

Avoid a superset of the circumstances in which renegotiation
apparently becomes insecure by refusing renegotiation completely
unless the extended master secret is used.

Signed-off-by: Michael Brown <mcb30@ipxe.org>

2025-10-12 23:25:09 +01:00

..

80211

[eap] Define a supplicant model for EAP and EAPoL

2023-09-18 12:07:28 +01:00

infiniband

[netdevice] Allocate private data for each network upper-layer driver

2023-09-13 20:23:46 +01:00

oncrpc

[nfs] Rewrite NFS URI handling

2014-05-18 21:53:39 +01:00

tcp

[uaccess] Remove redundant copy_from_user() and copy_to_user()

2025-04-30 15:32:03 +01:00

udp

[ipv4] Add support for classless static routes

2025-06-10 18:22:32 +01:00

aoe.c

[block] Remove userptr_t from block device abstraction

2025-04-24 17:11:30 +01:00

arp.c

[arp] Validate length of ARP packet

2016-03-12 01:24:03 +00:00

dhcpopts.c

[legal] Relicense files under GPL2_OR_LATER_OR_UBDL

2015-03-02 14:50:42 +00:00

dhcppkt.c

[legal] Relicense files under GPL2_OR_LATER_OR_UBDL

2015-03-02 14:17:31 +00:00

eap_md5.c

[eap] Allow MD5-Challenge authentication method to be disabled

2024-02-23 16:24:44 +00:00

eap_mschapv2.c

[eap] Add support for the MS-CHAPv2 authentication method

2024-02-23 16:37:07 +00:00

eap.c

[eap] Allow MD5-Challenge authentication method to be disabled

2024-02-23 16:24:44 +00:00

eapol.c

[uaccess] Remove redundant copy_from_user() and copy_to_user()

2025-04-30 15:32:03 +01:00

eth_slow.c

[lacp] Ignore (and do not echo) trailing padding on received packets

2020-10-14 14:18:49 +01:00

ethernet.c

[ethernet] Avoid false positive Coverity warning

2019-08-17 17:30:09 +01:00

fakedhcp.c

[pxe] Populate ciaddr in fake PXE Boot Server ACK packet

2015-09-01 21:24:02 +01:00

fc.c

[build] Fix the REQUIRE_SYMBOL mechanism

2015-03-05 00:59:38 +00:00

fcels.c

[legal] Relicense files under GPL2_OR_LATER_OR_UBDL

2015-03-02 14:17:31 +00:00

fcns.c

[legal] Relicense files under GPL2_OR_LATER_OR_UBDL

2015-03-02 14:17:31 +00:00

fcoe.c

[uaccess] Remove redundant copy_from_user() and copy_to_user()

2025-04-30 15:32:03 +01:00

fcp.c

[block] Remove userptr_t from block device abstraction

2025-04-24 17:11:30 +01:00

fragment.c

[legal] Relicense files under GPL2_OR_LATER_OR_UBDL

2015-03-02 14:17:31 +00:00

icmp.c

[legal] Relicense files under GPL2_OR_LATER_OR_UBDL

2015-03-02 14:17:31 +00:00

icmpv4.c

[legal] Relicense files under GPL2_OR_LATER_OR_UBDL

2015-03-02 14:17:31 +00:00

icmpv6.c

[ipv6] Disambiguate received ICMPv6 errors

2015-05-11 12:45:14 +01:00

infiniband.c

[infiniband] Require drivers to specify the number of ports

2021-01-27 01:15:35 +00:00

iobpad.c

[legal] Relicense files under GPL2_OR_LATER_OR_UBDL

2015-03-02 14:17:31 +00:00

ipv4.c

[ipv4] Add support for classless static routes

2025-06-10 18:22:32 +01:00

ipv6.c

[ipv6] Use driver-private data to hold link-local IPv6 settings block

2023-09-13 23:02:54 +01:00

lldp.c

[uaccess] Remove redundant copy_from_user() and copy_to_user()

2025-04-30 15:32:03 +01:00

ndp.c

[ipv6] Expose router address for DHCPv6 leased addresses

2024-06-27 13:43:37 +01:00

neighbour.c

[netdevice] Allocate private data for each network upper-layer driver

2023-09-13 20:23:46 +01:00

netdev_settings.c

[init] Show initialisation function names in debug messages

2025-07-15 14:10:33 +01:00

netdevice.c

[netdevice] Add the concept of an insomniac network device

2025-04-17 10:42:22 +01:00

nullnet.c

[legal] Relicense files under GPL2_OR_LATER_OR_UBDL

2015-03-02 14:17:31 +00:00

pccrc.c

[uaccess] Reduce scope of included uaccess.h header

2025-04-30 16:16:02 +01:00

pccrd.c

[peerdist] Add support for constructing and decoding discovery messages

2015-07-28 16:09:14 +01:00

peerblk.c

[uaccess] Remove redundant copy_from_user() and copy_to_user()

2025-04-30 15:32:03 +01:00

peerdisc.c

[netdevice] Separate concept of scope ID from network device name index

2023-01-14 00:09:20 +00:00

peerdist.c

[peerdist] Allow PeerDist to be globally enabled or disabled

2019-12-13 14:44:22 +00:00

peermux.c

[uaccess] Remove redundant copy_from_user() and copy_to_user()

2025-04-30 15:32:03 +01:00

ping.c

[xfer] Remove address family from definition of a socket opener

2020-07-15 18:46:58 +01:00

rarp.c

[legal] Relicense files under GPL2_OR_LATER_OR_UBDL

2015-03-02 14:17:31 +00:00

retry.c

[retry] Colourise debug output

2015-03-05 11:25:54 +00:00

rndis.c

[rndis] Clean up error handling path in register_rndis()

2018-07-09 10:35:57 +01:00

socket.c

[legal] Relicense files under GPL2_OR_LATER_OR_UBDL

2015-03-02 14:17:31 +00:00

stp.c

[time] Allow timer to be selected at runtime

2017-01-26 08:17:37 +00:00

tcp.c

[xfer] Remove address family from definition of a socket opener

2020-07-15 18:46:58 +01:00

tcpip.c

[netdevice] Limit MTU by hardware maximum frame length

2017-01-25 14:55:09 +00:00

tls.c

[tls] Disable renegotiation unless extended master secret is used

2025-10-12 23:25:09 +01:00

udp.c

[xfer] Remove address family from definition of a socket opener

2020-07-15 18:46:58 +01:00

validator.c

[crypto] Fix debug name for empty certificate chain validators

2024-08-14 14:07:41 +01:00

vlan.c

[netdevice] Allocate private data for each network upper-layer driver

2023-09-13 20:23:46 +01:00