]> git.ipfire.org Git - thirdparty/ipxe.git/commit
projects / thirdparty / ipxe.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 4f44f62) | patch
[tls] Generate master secret only after sending Client Key Exchange
authorMichael Brown <mcb30@ipxe.org>
Sun, 12 Oct 2025 21:20:13 +0000 (22:20 +0100)
committerMichael Brown <mcb30@ipxe.org>
Sun, 12 Oct 2025 21:20:13 +0000 (22:20 +0100)
commitd6656106e9a9a08642ab24700c0554273d917510
tree63500a4fc91bd083cf5e8b62d8c0feeff69b8307tree | snapshot
parent4f44f624027c9e62cf2ed4486cd9e3429e6ebb52commit | diff
[tls] Generate master secret only after sending Client Key Exchange

The calculation for the extended master secret as defined in RFC 7627
relies upon the digest of all handshake messages up to and including
the Client Key Exchange.

Facilitate this calculation by generating the master secret only after
sending the Client Key Exchange message.

Signed-off-by: Michael Brown <mcb30@ipxe.org>
src/net/tls.c diff | blob | blame | history
Mirror of https://github.com/ipxe/ipxe.git