From 2ac28e816bd3f133ebed6593a2340586d5f0f8fc Mon Sep 17 00:00:00 2001 From: Mark Kubacki Date: Tue, 16 Jun 2015 19:46:43 +0000 Subject: [PATCH] SSL: enable client-side CBC 1/n-1 record splitting Signed-off-by: W-Mark Kubacki --- src/ssl.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/src/ssl.c b/src/ssl.c index d7b7243..b9258df 100644 --- a/src/ssl.c +++ b/src/ssl.c @@ -272,8 +272,12 @@ static int meth_create(lua_State *L) #endif if (mode == LSEC_MODE_SERVER) SSL_set_accept_state(ssl->ssl); - else + else { SSL_set_connect_state(ssl->ssl); +#ifdef SSL_MODE_CBC_RECORD_SPLITTING + SSL_set_mode(ssl->ssl, SSL_MODE_CBC_RECORD_SPLITTING); +#endif + } io_init(&ssl->io, (p_send)ssl_send, (p_recv)ssl_recv, (p_error) ssl_ioerror, ssl);