]> git.ipfire.org Git - thirdparty/gnutls.git/commit
TLS 1.3: Introduced TLS 1.3 session resumption
authorAnder Juaristi <a@juaristi.eus>
Mon, 16 Apr 2018 15:13:47 +0000 (17:13 +0200)
committerNikos Mavrogiannopoulos <nmav@gnutls.org>
Sat, 26 May 2018 04:12:04 +0000 (04:12 +0000)
commit4b5678716f506d46da8dabdd343b268a5b9dd9b4
treef7fcb5c04a3848437254676aeda456d23f79ad87
parentaed3ac3a2dd976bbdef4705d7caa3db2b9239c79
TLS 1.3: Introduced TLS 1.3 session resumption

This introduces session resumption under TLS 1.3. For that,
it enables the psk_ke_modes extension when we enable session
tickets. It enables sending session tickets in addition to
PSK usernames. The detection of resumption vs pure PSK is done by
comparing the indexes sent with the index received by the server.

TLS 1.3 session tickets are always sent to the peer unless the
GNUTLS_NO_TICKETS is specified.

Resolves #290

Signed-off-by: Ander Juaristi <a@juaristi.eus>
Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
Signed-off-by: Daiki Ueno <dueno@redhat.com>
30 files changed:
.gitlab-ci.yml
lib/algorithms/ciphersuites.c
lib/auth.c
lib/constate.c
lib/constate.h
lib/db.c
lib/ext/pre_shared_key.c
lib/ext/pre_shared_key.h
lib/ext/psk_ke_modes.c
lib/ext/session_ticket.c
lib/gnutls_int.h
lib/handshake-tls13.c
lib/handshake.c
lib/handshake.h
lib/hello_ext.c
lib/includes/gnutls/gnutls.h.in
lib/session.c
lib/session_pack.c
lib/state.c
lib/state.h
lib/tls13/certificate.c
lib/tls13/certificate_verify.c
lib/tls13/finished.c
lib/tls13/finished.h
lib/tls13/hello_retry.c
lib/tls13/session_ticket.c
lib/tls13/session_ticket.h
m4/hooks.m4
src/serv.c
tests/session-tickets-missing.c