summaryrefslogtreecommitdiff
path: root/src/lib/libssl/tls13_internal.h
diff options
context:
space:
mode:
authorjsing <>2020-05-23 11:57:41 +0000
committerjsing <>2020-05-23 11:57:41 +0000
commitba81b98a6b238835898cb6995088954757b1c215 (patch)
tree9da31ab6ebed3c08f9ad15eb52125befdd8d966a /src/lib/libssl/tls13_internal.h
parentd518a43fe83cbe2b6d24c2351a50bead43c85026 (diff)
downloadopenbsd-ba81b98a6b238835898cb6995088954757b1c215.tar.gz
openbsd-ba81b98a6b238835898cb6995088954757b1c215.tar.bz2
openbsd-ba81b98a6b238835898cb6995088954757b1c215.zip
Provide the option to retry or return after post-handshake messages.
In TLSv1.3 post-handshake handshake messages are used for key updates and session tickets. These are in-band and mean that when the upper layer goes to read application data, we can end up reading and having to process handshake messages - this option changes whether we retry and read the next TLS record, or if we return, signalling that we want more data to be available. ok beck@ inoguchi@ tb@
Diffstat (limited to 'src/lib/libssl/tls13_internal.h')
-rw-r--r--src/lib/libssl/tls13_internal.h3
1 files changed, 2 insertions, 1 deletions
diff --git a/src/lib/libssl/tls13_internal.h b/src/lib/libssl/tls13_internal.h
index 7e188981f4..770c18d6ad 100644
--- a/src/lib/libssl/tls13_internal.h
+++ b/src/lib/libssl/tls13_internal.h
@@ -1,4 +1,4 @@
1/* $OpenBSD: tls13_internal.h,v 1.81 2020/05/19 01:30:34 beck Exp $ */ 1/* $OpenBSD: tls13_internal.h,v 1.82 2020/05/23 11:57:41 jsing Exp $ */
2/* 2/*
3 * Copyright (c) 2018 Bob Beck <beck@openbsd.org> 3 * Copyright (c) 2018 Bob Beck <beck@openbsd.org>
4 * Copyright (c) 2018 Theo Buehler <tb@openbsd.org> 4 * Copyright (c) 2018 Theo Buehler <tb@openbsd.org>
@@ -198,6 +198,7 @@ void tls13_record_layer_set_hash(struct tls13_record_layer *rl,
198 const EVP_MD *hash); 198 const EVP_MD *hash);
199void tls13_record_layer_set_legacy_version(struct tls13_record_layer *rl, 199void tls13_record_layer_set_legacy_version(struct tls13_record_layer *rl,
200 uint16_t version); 200 uint16_t version);
201void tls13_record_layer_set_retry_after_phh(struct tls13_record_layer *rl, int retry);
201void tls13_record_layer_handshake_completed(struct tls13_record_layer *rl); 202void tls13_record_layer_handshake_completed(struct tls13_record_layer *rl);
202int tls13_record_layer_set_read_traffic_key(struct tls13_record_layer *rl, 203int tls13_record_layer_set_read_traffic_key(struct tls13_record_layer *rl,
203 struct tls13_secret *read_key); 204 struct tls13_secret *read_key);