From 888e3bcd72d5406016b9e0de741026bc2a6f114d Mon Sep 17 00:00:00 2001 From: Ingela Anderton Andin Date: Mon, 15 Jun 2026 14:08:08 +0200 Subject: [PATCH] ssl: Avoid cookie forgery during setup up window --- lib/ssl/src/dtls_server_connection.erl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/ssl/src/dtls_server_connection.erl b/lib/ssl/src/dtls_server_connection.erl index acbd1107c8b7..7dbc82225e6c 100644 --- a/lib/ssl/src/dtls_server_connection.erl +++ b/lib/ssl/src/dtls_server_connection.erl @@ -183,7 +183,7 @@ initial_hello(enter, _, State) -> initial_hello({call, From}, {start, Timeout}, #state{protocol_specific = PS0, recv = Recv} = State) -> PS = PS0#{current_cookie_secret => dtls_v1:cookie_secret(), - previous_cookie_secret => <<>>}, + previous_cookie_secret => dtls_v1:cookie_secret()}, erlang:send_after(dtls_v1:cookie_timeout(), self(), new_cookie_secret), dtls_gen_connection:next_event(hello, no_record, State#state{recv = Recv#recv{from = From},