Changeset 8e33f2d in mod_gnutls

Timestamp:

Sep 25, 2005, 2:27:08 PM (18 years ago)

Author:

Paul Querna <chip@…>

Branches:

asyncio, debian/master, debian/stretch-backports, jessie-backports, main, master, msva, proxy-ticket, upstream

Children:

7bebb42

Parents:

740a39e

Message:

Put a limit on the number of times we try to handshake.

File:

• src/gnutls_io.c (modified) (2 diffs)

src/gnutls_io.c

@@ -354 +354 @@
 }
 
+#define HANDSHAKE_MAX_TRIES 100
 static int gnutls_do_handshake(mgs_handle_t * ctxt)
 {
     int ret;
     int errcode;
+    int maxtries = HANDSHAKE_MAX_TRIES;
+
     if (ctxt->status != 0) {
         return -1;
@@ -365 +368 @@
     do {
         ret = gnutls_handshake(ctxt->session);
-    } while (ret == GNUTLS_E_AGAIN);
-    
+        maxtries--;
+    } while (ret == GNUTLS_E_AGAIN && maxtries > 0);
+
+    if (maxtries < 1) {
+        ctxt->status = -1;
+#if USING_2_1_RECENT
+        ap_log_cerror(APLOG_MARK, APLOG_ERR, 0, ctxt->c,
+                     "GnuTLS: Handshake Failed. Hit Maximum Attempts");
+#else
+        ap_log_error(APLOG_MARK, APLOG_ERR, 0, ctxt->c->base_server,
+                     "GnuTLS: Handshake Failed. Hit Maximum Attempts");
+#endif
+        gnutls_alert_send(ctxt->session, GNUTLS_AL_FATAL, 
+                          gnutls_error_to_alert(ret, NULL));
+        gnutls_deinit(ctxt->session);
+        return -1;
+    }
+
     if (ret < 0) {
         if (ret == GNUTLS_E_WARNING_ALERT_RECEIVED