Get rid of struct dtls1_retransmit_state.

In order to retransmit DTLS messages we potentially need to use the
record protection from a previous epoch. However, DTLS currently also
saves and restores the session, which is unnecessary - all of the
record protection and keys are handled in the TLS record layer.

Remove the rather useless dtls1_retransmit_state struct and just
keep the epoch - keeping pointers hanging around to sessions is pretty
nasty and unnecessary.

ok kenjiro@ tb@

1 files changed, 2 insertions, 7 deletions

diff --git a/src/lib/libssl/dtls_local.h b/src/lib/libssl/dtls_local.h
index 3352b31d3c..5a85bba607 100644
--- a/src/lib/libssl/dtls_local.h
+++ b/src/lib/libssl/dtls_local.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: dtls_local.h,v 1.3 2026/04/29 14:59:26 jsing Exp $ */
+/* $OpenBSD: dtls_local.h,v 1.4 2026/05/06 15:06:35 jsing Exp $ */
 /*
  * DTLS implementation written by Nagendra Modadugu
  * (nagendra@cs.stanford.edu) for the OpenSSL project 2005.
@@ -77,19 +77,14 @@ typedef struct dtls1_bitmap_st {
                                            encoding */
 } DTLS1_BITMAP;
 
-struct dtls1_retransmit_state {
-        SSL_SESSION *session;
-        unsigned short epoch;
-};
-
 struct hm_header_st {
+        uint16_t epoch;
         unsigned char type;
         unsigned long msg_len;
         unsigned short seq;
         unsigned long frag_off;
         unsigned long frag_len;
         unsigned int is_ccs;
-        struct dtls1_retransmit_state saved_retransmit_state;
 };
 
 struct dtls1_timeout_st {