]> git.ipfire.org Git - thirdparty/ipxe.git/commit
[tls] Generate master secret at point of sending ClientKeyExchange
authorMichael Brown <mcb30@ipxe.org>
Thu, 6 Oct 2022 15:06:44 +0000 (16:06 +0100)
committerMichael Brown <mcb30@ipxe.org>
Tue, 11 Oct 2022 13:37:12 +0000 (14:37 +0100)
commit1a7317e7d46f134f21244f6d272f90648beda4e7
treef9b9183152d4485a0e7277bcdb940268c08e7991
parent18b861024ad542bd6df337dfb10a84e04173040f
[tls] Generate master secret at point of sending ClientKeyExchange

The master secret is currently constructed upon receiving the
ServerHello message.  This precludes the use of key exchange
mechanisms such as Ephemeral Diffie-Hellman (DHE), which require a
ServerKeyExchange message to exchange additional key material before
the pre-master secret and master secret can be constructed.

Allow for the use of such cipher suites by deferring generation of the
master secret until the point of sending the ClientKeyExchange
message.

Signed-off-by: Michael Brown <mcb30@ipxe.org>
src/net/tls.c