sslv23 support with ssl2 record format with version set to 3.0

15 years ago · 8c6d4531ee
parent 07a85427dd
commit 8c6d4531ee
1 changed files with 4 additions and 1 deletions
--- a/src/app-layer-detect-proto.c
+++ b/src/app-layer-detect-proto.c
@ -366,8 +366,11 @@ void AppLayerDetectProtoThreadInit(void) {
    AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_SSH, "SSH-", 4, 0, STREAM_TOCLIENT);
    AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_SSH, "SSH-", 4, 0, STREAM_TOSERVER);

-    /** SSLv2 */
+    /** SSLv2  and SSLv23*/
    AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_TLS, "|01 00 02|", 5, 2, STREAM_TOSERVER);
+    /* subsection - SSLv2 style record by client, but informing the server the max
+     * version it supports */
+    AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_TLS, "|01 03 00|", 5, 2, STREAM_TOSERVER);
    AlpProtoAdd(&alp_proto_ctx, IPPROTO_TCP, ALPROTO_TLS, "|00 02|", 7, 5, STREAM_TOCLIENT);

    /** SSLv3 */