summaryrefslogtreecommitdiffstats
path: root/lib/libssl/tls13_internal.h
diff options
context:
space:
mode:
authorjsing <jsing@openbsd.org>2020-01-24 04:43:09 +0000
committerjsing <jsing@openbsd.org>2020-01-24 04:43:09 +0000
commitbe8ffa848e48af7cb9aae9d1e134f5bcd89137b4 (patch)
tree10ec020d1003ab8a5cd267010a534632568b6cbb /lib/libssl/tls13_internal.h
parentEnable SSL_ENC_FLAG_SIGALGS on TLSv1_3_enc_data. (diff)
downloadwireguard-openbsd-be8ffa848e48af7cb9aae9d1e134f5bcd89137b4.tar.xz
wireguard-openbsd-be8ffa848e48af7cb9aae9d1e134f5bcd89137b4.zip
Switch to encrypted records in the TLSv1.3 server.
This adds code to perform key derivation and set the traffic keys once the ServerHello message has been sent, enabling encrypted records. ok beck@ tb@
Diffstat (limited to 'lib/libssl/tls13_internal.h')
-rw-r--r--lib/libssl/tls13_internal.h3
1 files changed, 2 insertions, 1 deletions
diff --git a/lib/libssl/tls13_internal.h b/lib/libssl/tls13_internal.h
index 7b3670bf452..b42889712fe 100644
--- a/lib/libssl/tls13_internal.h
+++ b/lib/libssl/tls13_internal.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: tls13_internal.h,v 1.51 2020/01/24 04:36:29 beck Exp $ */
+/* $OpenBSD: tls13_internal.h,v 1.52 2020/01/24 04:43:09 jsing Exp $ */
/*
* Copyright (c) 2018 Bob Beck <beck@openbsd.org>
* Copyright (c) 2018 Theo Buehler <tb@openbsd.org>
@@ -280,6 +280,7 @@ int tls13_client_key_update_send(struct tls13_ctx *ctx, CBB *cbb);
int tls13_client_key_update_recv(struct tls13_ctx *ctx, CBS *cbs);
int tls13_server_hello_recv(struct tls13_ctx *ctx, CBS *cbs);
int tls13_server_hello_send(struct tls13_ctx *ctx, CBB *cbb);
+int tls13_server_hello_sent(struct tls13_ctx *ctx);
int tls13_server_hello_retry_recv(struct tls13_ctx *ctx, CBS *cbs);
int tls13_server_hello_retry_send(struct tls13_ctx *ctx, CBB *cbb);
int tls13_server_encrypted_extensions_recv(struct tls13_ctx *ctx, CBS *cbs);