diff options
| author |   tb <tb@openbsd.org> | 2020-07-30 16:23:17 +0000 |
|---|---|---|
| committer | tb <tb@openbsd.org> | 2020-07-30 16:23:17 +0000 |
| commit | 08d6ed5e6e3414ad6db9903a0aa884ab2f3764b9 (patch) | |
| tree | 217b3bd26baf432f029103b31e8dd9bbf2531480 /lib/libssl/tls13_handshake.c | |
| parent | When this Aviion-only driver is eventually sent to join its friends in the attic (diff) | |
| download | wireguard-openbsd-08d6ed5e6e3414ad6db9903a0aa884ab2f3764b9.tar.xz wireguard-openbsd-08d6ed5e6e3414ad6db9903a0aa884ab2f3764b9.zip | |
Add minimal info callback support for TLSv1.3
As abieber@ found the hard way, some python frameworks (twisted, synapse)
thought it a great idea to use the info callback mechanism (designed to
get state information about SSL objects) to modify state information such
as setting and verifying the SNI. The switch of TLS_method() to default
to TLSv1.3 broke these contraptions. Further bits of the info callback
mechanism will likely metastasize throughout the TLSv1.3 stack if we
need them, so we only do what's really necessary now.
Lots of debugging, crucial hint and testing by abieber
input & ok jsing
Diffstat (limited to 'lib/libssl/tls13_handshake.c')
| -rw-r--r-- | lib/libssl/tls13_handshake.c | 11 |
1 files changed, 10 insertions, 1 deletions
diff --git a/lib/libssl/tls13_handshake.c b/lib/libssl/tls13_handshake.c index 80ad7c02642..b3cecc77efd 100644 --- a/lib/libssl/tls13_handshake.c +++ b/lib/libssl/tls13_handshake.c @@ -1,4 +1,4 @@ -/* $OpenBSD: tls13_handshake.c,v 1.63 2020/06/02 13:57:09 tb Exp $ */ +/* $OpenBSD: tls13_handshake.c,v 1.64 2020/07/30 16:23:17 tb Exp $ */ /* * Copyright (c) 2018-2019 Theo Buehler <tb@openbsd.org> * Copyright (c) 2019 Joel Sing <jsing@openbsd.org> @@ -343,6 +343,12 @@ tls13_handshake_perform(struct tls13_ctx *ctx) const struct tls13_handshake_action *action; int ret; + if (!ctx->handshake_started) { + ctx->handshake_started = 1; + if (ctx->info_cb != NULL) + ctx->info_cb(ctx, TLS13_INFO_HANDSHAKE_STARTED, 1); + } + for (;;) { if ((action = tls13_handshake_active_action(ctx)) == NULL) return TLS13_IO_FAILURE; @@ -350,6 +356,9 @@ tls13_handshake_perform(struct tls13_ctx *ctx) if (action->handshake_complete) { ctx->handshake_completed = 1; tls13_record_layer_handshake_completed(ctx->rl); + if (ctx->info_cb != NULL) + ctx->info_cb(ctx, + TLS13_INFO_HANDSHAKE_COMPLETED, 1); return TLS13_IO_SUCCESS; } |