AuroraMiddleware/mbedtls
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Complete client support for session tickets

Browse Source
This commit is contained in:
Manuel Pégourié-Gonnard 2013-07-31 16:31:33 +02:00 committed by Paul Bakker
parent a5cc6025e7
commit 6377e41ef5
1 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
library/ssl_cli.c
View File

@ -431,7 +431,25 @@ static int ssl_write_client_hello( ssl_context *ssl )
if( ssl->renegotiation != SSL_INITIAL_HANDSHAKE || n < 16 || n > 32 ||
ssl->handshake->resume == 0 )
{
n = 0;
}
/*
* RFC 5077 section 3.4: "When presenting a ticket, the client MAY
* generate and include a Session ID in the TLS ClientHello."
*/
if( ssl->renegotiation == SSL_INITIAL_HANDSHAKE &&
ssl->session_negotiate->ticket != NULL &&
ssl->session_negotiate->ticket_len != 0 )
{
ret = ssl->f_rng( ssl->p_rng, ssl->session_negotiate->id, 32 );
if( ret != 0 )
return( ret );
ssl->session_negotiate->length = n = 32;
}
*p++ = (unsigned char) n;