diff options
| author | Péter Dimitrov <[email protected]> | 2019-02-20 11:23:28 +0100 |
|---|---|---|
| committer | Péter Dimitrov <[email protected]> | 2019-02-25 15:23:38 +0100 |
| commit | 36f59ecc82348a2b1d6818d3cc44a18ec2f66e9d (patch) | |
| tree | 24c517bb3fca57f52aad95ec8391b77cc8e4f0e2 /lib/ssl/src/ssl_handshake.erl | |
| parent | 9ff209580d4d9b26ae62055c3a8fbcef784a1622 (diff) | |
| download | otp-36f59ecc82348a2b1d6818d3cc44a18ec2f66e9d.tar.gz otp-36f59ecc82348a2b1d6818d3cc44a18ec2f66e9d.tar.bz2 otp-36f59ecc82348a2b1d6818d3cc44a18ec2f66e9d.zip | |
ssl: Implement 'hello_retry_request'
Refactor state 'start' and handler functions.
Send 'hello_retry_request' if ClientHello does not contain
sufficient information.
Change-Id: I9fccb38aff5ba88bff75887261e8b1487bd64e17
Diffstat (limited to 'lib/ssl/src/ssl_handshake.erl')
| -rw-r--r-- | lib/ssl/src/ssl_handshake.erl | 12 |
1 files changed, 9 insertions, 3 deletions
diff --git a/lib/ssl/src/ssl_handshake.erl b/lib/ssl/src/ssl_handshake.erl index 6b1e3b6e07..de4f26f759 100644 --- a/lib/ssl/src/ssl_handshake.erl +++ b/lib/ssl/src/ssl_handshake.erl @@ -76,7 +76,7 @@ handle_client_hello_extensions/9, %% Returns server hello extensions handle_server_hello_extensions/9, select_curve/2, select_curve/3, select_hashsign/4, select_hashsign/5, - select_hashsign_algs/3, empty_extensions/2, add_server_share/2 + select_hashsign_algs/3, empty_extensions/2, add_server_share/3 ]). -export([get_cert_params/1]). @@ -1150,12 +1150,18 @@ maybe_add_key_share(HelloExtensions, KeyShare) -> HelloExtensions#{key_share => #key_share_client_hello{ client_shares = ClientShares}}. -add_server_share(Extensions, KeyShare) -> +add_server_share(server_hello, Extensions, KeyShare) -> #key_share_server_hello{server_share = ServerShare0} = KeyShare, %% Keep only public keys ServerShare = kse_remove_private_key(ServerShare0), Extensions#{key_share => #key_share_server_hello{ - server_share = ServerShare}}. + server_share = ServerShare}}; +add_server_share(hello_retry_request, Extensions, + #key_share_server_hello{ + server_share = #key_share_entry{group = Group}}) -> + Extensions#{key_share => #key_share_hello_retry_request{ + selected_group = Group}}. + kse_remove_private_key(#key_share_entry{ group = Group, |