Skip to content

Fix check for TLS downgrade canary #337

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Apr 20, 2025
Merged

Fix check for TLS downgrade canary #337

merged 3 commits into from
Apr 20, 2025

Conversation

mingyech
Copy link
Member

Add TLS downgrade protection code from stdlib to uconn.clientHandshake. Also fix a related nil pointer dereference bug.

Closes #181

@mingyech mingyech merged commit f889276 into master Apr 20, 2025
3 checks passed
@mingyech mingyech deleted the downgrade branch April 21, 2025 00:25
syphyr pushed a commit to syphyr/obfs4 that referenced this pull request May 7, 2025
This is a temporary fix, and should be replaced with a more permanent solution in the earliest opportunity.

refraction-networking/utls#337
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Tls downgrade attack?
1 participant