]> git.ipfire.org Git - thirdparty/ipxe.git/commit
[tls] Generate pre-master secret at point of sending ClientKeyExchange
authorMichael Brown <mcb30@ipxe.org>
Tue, 11 Oct 2022 12:47:06 +0000 (13:47 +0100)
committerMichael Brown <mcb30@ipxe.org>
Tue, 11 Oct 2022 13:37:12 +0000 (14:37 +0100)
commit028aac99a397f591de6cc6f6f2b4763f55aa8962
treee42ad5ba0e477d3614519125aa3a1252dae4ae20
parent1a7317e7d46f134f21244f6d272f90648beda4e7
[tls] Generate pre-master secret at point of sending ClientKeyExchange

The pre-master secret is currently constructed at the time of
instantiating the TLS connection.  This precludes the use of key
exchange mechanisms such as Ephemeral Diffie-Hellman (DHE), which
require a ServerKeyExchange message to exchange additional key
material before the pre-master secret can be constructed.

Allow for the use of such cipher suites by deferring generation of the
master secret until the point of sending the ClientKeyExchange
message.

Signed-off-by: Michael Brown <mcb30@ipxe.org>
src/include/ipxe/tls.h
src/net/tls.c