Comment 70 for bug 969343

Revision history for this message
Diane Trout (diane-trout) wrote :

One thing my wireshark captures were showing me, is that the more recent versions of openssl were adding an "extension 15". I tracked that down as the tls "heartbeat" extension. Using debian's 1.0.1c package I prevented openssl from adding the Heartbeat extension to the client hello message, and reinstalled the official ubuntu precise wpasupplicant_0.7.3-6ubuntu2_amd64.deb and shocking was able to connect.

The attached patch is more to show where in the code the problem I'm having is located.

I also tried "s->tlsext_heartbeat &= SSL_TLSEXT_HB_DONT_RECV_REQUESTS;" which also seemed to suppress the heartbeat message.

Any suggestions for how we should see if this works for other people?