You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@qpid.apache.org by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2022/08/03 06:12:00 UTC

[jira] [Commented] (PROTON-2586) TLS OpenSSL library: incomplete decryption/encryption of staged buffers

    [ https://issues.apache.org/jira/browse/PROTON-2586?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17574510#comment-17574510 ] 

ASF subversion and git services commented on PROTON-2586:
---------------------------------------------------------

Commit b9fe1739d4f2ba59c136a7f5e87b30bab5950e5a in qpid-proton's branch refs/heads/main from Clifford Jansen
[ https://gitbox.apache.org/repos/asf?p=qpid-proton.git;h=b9fe1739d ]

PROTON-2586: TLS OpenSSL library - incomplete decryption/encryption of staged buffers

PROTON-2586: TLS OpenSSL library - incomplete decryption/encryption of staged buffers


> TLS OpenSSL library: incomplete decryption/encryption of staged buffers
> -----------------------------------------------------------------------
>
>                 Key: PROTON-2586
>                 URL: https://issues.apache.org/jira/browse/PROTON-2586
>             Project: Qpid Proton
>          Issue Type: Bug
>          Components: proton-c
>    Affects Versions: proton-c-0.37.0
>            Reporter: Clifford Jansen
>            Assignee: Clifford Jansen
>            Priority: Major
>
> OpenSSL processes TLS records one at time.  It does its conversion work in buffers just larger than a maximum sized TLS record (16K).  When processing large sized input and output buffers in a single pn_tls_process() call, the Proton TLS library has to loop inserting unprocessed data into the small OpenSSL buffer and extract the encrypted/decrypted data into the output buffer and free space for the next iteration.  The code currently can exit the loop prematurely.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org