SSL Updates – NET+OS 7.3

Last Updated: 06/02/09 Fix Count: 3

Title

SSL memory leak
 

Case: 30656

Date fixed: 06/02/09

Description

Nasslclient leaking memory. We were losing about 1500 bytes every time we made a client connection using NaSslNgConnect.

Solution

Fixed leak in tls_handshake.c.
 

Title

SSL Client connection failure – Bad Record MAC
 

Case: 28520

Date fixed: 11/04/08

Description

Nasslclient example application would not connect if key was over 1024 bytes

Solution

Modified handshake code to handle keys larger than 1024 bytes.
 

Title

SSL Client connection failure
 

Case: 28273

Date fixed: 10/22/08

Description

Nasslclient example application would not connect with some SSL Servers.

Solution

Modified examples to provide the user an option to select the SSL version number so that the SSL client can work with SSLv3 OpenSSL servers. This update is a work around in the client side for a bug in the OpenSSL server code.
 

Customers can refer to the following lines in root.c of the nasslclient sample application for usage.

// client_params.version = NA_SSL_V30_VERSION; // for earlier SSLv3

client_params.version = NA_SSL_DFLT_VERSION; // use default

You will need to uncomment the top line and comment the default one to work with OpenSSL servers which run on SSLv3.
 

Files: netos\h\ssl.h

netos\lib\arm7\32b\ghs\libssl.a
netos\lib\arm9\32b\gnu\libssl.a
netos\lib\arm7\32b\ghs\libssl.a
netos\lib\arm9\32b\gnu\libssl.a

netos\lib\arm7\32b\ghs\libssldbg.a
netos\lib\arm9\32b\gnu\libssldbg.a
netos\lib\arm7\32b\ghs\libssldbg.a
netos\lib\arm9\32b\gnu\libssldbg.a

netos\src\examples\nasslclient\root.c

netos\src\examples\nasslsvr\root.c

Special Instructions

• Unzip the patch(es) to the root of your NET+OS installation, for example C:\netos73\.
• Be sure to install any patches listed under Dependencies below
• Rebuild your application.

Patch Link: SSLUpdates_73

Dependencies

This patch also requires the installation of the following patch(es):

ApiReference_73