Commit e06bd133 authored by agl's avatar agl Committed by Commit bot

net: enable SSL_MODE_CBC_RECORD_SPLITTING with OpenSSL.

This enables 1/n-1 record splitting, which we have done with NSS for a
long time. No compat issues are expected with this.

(This does not appear to be a regression from the OpenSSL -> BoringSSL
switch as I don't see that a record splitting patch was previously
included.)

BUG=none

Review URL: https://codereview.chromium.org/508803003

Cr-Commit-Position: refs/heads/master@{#292197}
parent cd142598
......@@ -744,6 +744,7 @@ int SSLClientSocketOpenSSL::Init() {
SslSetClearMask mode;
mode.ConfigureFlag(SSL_MODE_RELEASE_BUFFERS, true);
mode.ConfigureFlag(SSL_MODE_CBC_RECORD_SPLITTING, true);
mode.ConfigureFlag(SSL_MODE_HANDSHAKE_CUTTHROUGH,
ssl_config_.false_start_enabled);
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment