openbsd/src/lib/libssl/ssl_kex.c, branch OPENBSD_6_8_BASEA mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=OPENBSD_6_8_BASE2020-04-18T14:07:56+00:00Expose the peer ephemeral public key used for TLSv1.3 key exchange.2020-04-18T14:07:56+00:00jsing2020-04-18T14:07:56+00:00urn:sha1:45ae045ccf3a3740b07e9b2ecbbbbb3320d2f36d
SSL_get_server_tmp_key() provides the peer ephemeral public key used
for key exchange. In the case of TLSv1.3 this is essentially the peer
public key from the key share used for TLSv1.3 key exchange, hence make it
availaable via SSL_get_server_tmp_key().
ok inoguchi@ tb@
Factor out/rewrite the ECDHE EC point key exchange code.2020-01-30T16:25:09+00:00jsing2020-01-30T16:25:09+00:00urn:sha1:c435cca7eec0ec8c6d2f34f5511be91edae36307
This reduces replication between the existing TLS client/server and allows
the code to soon be reused for TLSv1.3.
With feedback from inoguchi@ and tb@
ok inoguchi@ tb@