kris/boringssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
707af294a8
boringssl/ssl
History
David Benjamin 707af294a8 Support asynchronous ticket decryption with TLS 1.3. 
This shuffles a bit of the code around session resumption in TLS 1.3 to
make the async point cleaner to inject. It also fills in cipher and
tlsext_hostname more uniformly.

Filling in the cipher on resumption is a no-op as SSL_SESSION_dup
already copies it, but avoids confusion should we ever implement TLS
1.3's laxer cipher matching on the server. Not filling in
tlsext_hostname on resumption was an oversight; the relevant check isn't
whether we are resuming but whether we have a fresh SSL_SESSION to fill
things into.

Change-Id: Ic02eb079ff228ce4a4d3e0de7445e18cd367e8b2
Reviewed-on: https://boringssl-review.googlesource.com/14205
Commit-Queue: David Benjamin <davidben@google.com>
Reviewed-by: Adam Langley <agl@google.com>
2017-03-11 00:05:29 +00:00
..
test Export server-side ticket_age skew. 2017-03-08 14:59:01 +00:00
bio_ssl.c Move the SSL BIO into ssl/ from decrepit/. 2017-02-03 21:08:10 +00:00
CMakeLists.txt Moving transcript and PRF functions to SSL_TRANSCRIPT. 2017-02-10 16:33:42 +00:00
custom_extensions.c Pass explicit hs parameters into custom_extensions.c. 2016-12-06 19:49:36 +00:00
d1_both.c Trim x509.h includes. 2017-03-07 23:13:49 +00:00
d1_lib.c Don't use long for timestamps. 2017-03-01 21:58:38 +00:00
d1_pkt.c Remove support for blocking DTLS timeout handling. 2017-03-01 19:59:28 +00:00
d1_srtp.c Fix ssl_ctx_make_profiles error handling. 2016-09-27 13:27:06 +00:00
dtls_method.c Add |X509_METHOD| and, using it, move many functions to ssl_x509.c. 2017-02-09 18:30:35 +00:00
dtls_record.c Don't use the buffer BIO in DTLS. 2017-01-25 23:35:32 +00:00
handshake_client.c Trim x509.h includes. 2017-03-07 23:13:49 +00:00
handshake_server.c Support asynchronous ticket decryption with TLS 1.0–1.2. 2017-03-11 00:04:18 +00:00
internal.h Support asynchronous ticket decryption with TLS 1.3. 2017-03-11 00:05:29 +00:00
s3_both.c Move ssl_verify_alarm_type into ssl_x509.c. 2017-03-07 23:14:16 +00:00
s3_lib.c Move new_cipher and new_session to SSL_HANDSHAKE. 2017-02-17 20:48:31 +00:00
s3_pkt.c Establish that the default value of an out-arg for alerts is SSL_AD_DECODE_ERROR. 2017-02-09 18:07:30 +00:00
ssl_aead_ctx.c Adding version to AEAD. 2017-03-08 19:12:39 +00:00
ssl_asn1.c Don't use long for timestamps. 2017-03-01 21:58:38 +00:00
ssl_buffer.c Work around language and compiler bug in memcpy, etc. 2016-12-21 20:34:47 +00:00
ssl_cert.c Add |SSL[_CTX]_set_chain_and_key|. 2017-03-08 19:11:57 +00:00
ssl_cipher.c Fix configuring the empty cipher list. 2017-03-10 01:20:25 +00:00
ssl_ecdh.c Remove New Hope key agreement. 2016-12-10 01:06:31 +00:00
ssl_file.c Remove |X509| things from SSL_SESSION. 2017-02-10 19:12:04 +00:00
ssl_lib.c Support asynchronous ticket decryption with TLS 1.0–1.2. 2017-03-11 00:04:18 +00:00
ssl_privkey_cc.cc Rename ssl_rsa.c to ssl_privkey.c. 2017-02-09 18:45:11 +00:00
ssl_privkey.c Add |SSL[_CTX]_set_chain_and_key|. 2017-03-08 19:11:57 +00:00
ssl_session.c Support asynchronous ticket decryption with TLS 1.0–1.2. 2017-03-11 00:04:18 +00:00
ssl_stat.c Unexport the handshake's internal state. 2017-02-13 19:44:30 +00:00
ssl_test.cc Support asynchronous ticket decryption with TLS 1.3. 2017-03-11 00:05:29 +00:00
ssl_transcript.c Moving transcript and PRF functions to SSL_TRANSCRIPT. 2017-02-10 16:33:42 +00:00
ssl_x509.c Move ssl_verify_alarm_type into ssl_x509.c. 2017-03-07 23:14:16 +00:00
t1_enc.c Move tmp.extended_master_secret to SSL_HANDSHAKE. 2017-02-17 21:36:37 +00:00
t1_lib.c Support asynchronous ticket decryption with TLS 1.3. 2017-03-11 00:05:29 +00:00
tls13_both.c Support asynchronous ticket decryption with TLS 1.3. 2017-03-11 00:05:29 +00:00
tls13_client.c Rename initial_ctx to session_ctx. 2017-03-10 22:50:46 +00:00
tls13_enc.c Move new_cipher and new_session to SSL_HANDSHAKE. 2017-02-17 20:48:31 +00:00
tls13_server.c Support asynchronous ticket decryption with TLS 1.3. 2017-03-11 00:05:29 +00:00
tls_method.c Allow users of the |CRYPTO_BUFFER|-based methods to verify certs after the handshake. 2017-03-08 01:09:42 +00:00
tls_record.c Adding version to AEAD. 2017-03-08 19:12:39 +00:00