ssl,dtls: fix CertificateVerify dissection for TLSv1.2
authorPeter Wu <peter@lekensteyn.nl>
Thu, 12 Mar 2015 02:01:37 +0000 (03:01 +0100)
committerMichael Mann <mmann78@netscape.net>
Thu, 12 Mar 2015 12:48:00 +0000 (12:48 +0000)
commit70d34eee2b26c8b83e590c8a8ba0aaa942558d24
tree95cd785cffd778867ead4a36ff35674f4c989bd6
parent95ce3928de8c08934ab7ba49492b319cbdb0c9f9
ssl,dtls: fix CertificateVerify dissection for TLSv1.2

TLSv1.2 gained an additional SignatureAndHashAlgorithm field for fields
marked with the digitally-signed attribute. This was already implemented
before for ServerKeyExchange, let's reuse that.

Note that the SignatureAndHashAlgorithm tree and fields (hash algo,
signature algo) are repurposed in a different context, but since the
structure is the same it is kept like this.

By the way, add support for DTLSv1.2 too. RFC 6347 section 4.2.6
suggests that the implementation is the same (as far as the dissector is
concerned).

Also update the comments and remove the additional "Signature with
client's private key" subtree since the CertificateVerify message has no
other items.

Bug: 11045
Change-Id: I025901b85e607f04d60357ff14187cc13db2ae5d
Reviewed-on: https://code.wireshark.org/review/7650
Reviewed-by: Peter Wu <peter@lekensteyn.nl>
Tested-by: Peter Wu <peter@lekensteyn.nl>
Reviewed-by: Michael Mann <mmann78@netscape.net>
epan/dissectors/packet-dtls.c
epan/dissectors/packet-ssl-utils.c
epan/dissectors/packet-ssl-utils.h
epan/dissectors/packet-ssl.c