]> git.ipfire.org Git - thirdparty/ipxe.git/commit
[tls] Generate key material after sending ClientKeyExchange
authorMichael Brown <mcb30@ipxe.org>
Tue, 30 Jan 2024 15:17:49 +0000 (15:17 +0000)
committerMichael Brown <mcb30@ipxe.org>
Tue, 30 Jan 2024 15:25:38 +0000 (15:25 +0000)
commit989dbe0bc4e63a5843e0c23fb1fd25ba8403bc40
treebe5fdaae98d86bfda697c93c5ac851f73f1fa3c3
parent6f70e8be834e3531c9e8910c619ce9ed377f2081
[tls] Generate key material after sending ClientKeyExchange

The construction of the key material for the pending cipher suites
from the TLS master secret must happen regardless of which key
exchange algorithm is in use, and the key material is not required to
send the ClientKeyExchange handshake (which is sent before changing
cipher suites).

Centralise the call to tls_generate_keys() after performing key
exchange via the selected algorithm.

Signed-off-by: Michael Brown <mcb30@ipxe.org>
src/net/tls.c