daemon/tls: client-side re-authentication support for tls1.3

diff --git a/daemon/tls.c b/daemon/tls.c
index fd7fac51a054148bd52d1b7656da7563013575d2..f90e497d0ffa8fd2b45bd59bb4990c7264661226 100644 (file)
--- a/daemon/tls.c
+++ b/daemon/tls.c
@@ -1154,6 +1154,9 @@ struct tls_client_ctx_t *tls_client_ctx_new(struct tls_client_paramlist_entry *e
        unsigned int flags = GNUTLS_CLIENT | GNUTLS_NONBLOCK
 #ifdef GNUTLS_ENABLE_FALSE_START
                             | GNUTLS_ENABLE_FALSE_START
+#endif
+#if GNUTLS_VERSION_NUMBER >= 0x030605
+                            | GNUTLS_AUTO_REAUTH | GNUTLS_POST_HANDSHAKE_AUTH
 #endif
        ;
        int ret = gnutls_init(&ctx->c.tls_session,  flags);