2
0
mirror of https://github.com/curl/curl.git synced 2025-02-17 14:59:45 +08:00
curl/lib/vtls
Michael Kaufmann 549310e907 openssl: support session resume with TLS 1.3
Session resumption information is not available immediately after a TLS 1.3
handshake. The client must wait until the server has sent a session ticket.

Use OpenSSL's "new session" callback to get the session information and put it
into curl's session cache. For TLS 1.3 sessions, this callback will be invoked
after the server has sent a session ticket.

The "new session" callback is invoked only if OpenSSL's session cache is
enabled, so enable it and use the "external storage" mode which lets curl manage
the contents of the session cache.

A pointer to the connection data and the sockindex are now saved as "SSL extra
data" to make them available to the callback.

This approach also works for old SSL/TLS versions and old OpenSSL versions.

Reviewed-by: Daniel Stenberg <daniel@haxx.se>

Fixes 
Closes 
2018-11-21 11:18:25 +01:00
..
cyassl.c
cyassl.h
darwinssl.c ssl: replace all internal uses of CURLE_SSL_CACERT 2018-11-20 14:57:00 +01:00
darwinssl.h
gskit.c gskit: make sure to terminate version string 2018-10-07 22:36:25 +02:00
gskit.h
gtls.c ssl: replace all internal uses of CURLE_SSL_CACERT 2018-11-20 14:57:00 +01:00
gtls.h
mbedtls.c ssl: replace all internal uses of CURLE_SSL_CACERT 2018-11-20 14:57:00 +01:00
mbedtls.h
mesalink.c vtls: add MesaLink to curl_sslbackend enum 2018-10-30 16:56:51 +01:00
mesalink.h vtls: add a MesaLink vtls backend 2018-09-13 08:26:37 +02:00
nss.c ssl: replace all internal uses of CURLE_SSL_CACERT 2018-11-20 14:57:00 +01:00
nssg.h
openssl.c openssl: support session resume with TLS 1.3 2018-11-21 11:18:25 +01:00
openssl.h
polarssl_threadlock.c
polarssl_threadlock.h
polarssl.c ssl: replace all internal uses of CURLE_SSL_CACERT 2018-11-20 14:57:00 +01:00
polarssl.h
schannel_verify.c winssl: be consistent in Schannel capitalization 2018-11-07 10:11:13 +01:00
schannel.c winssl: be consistent in Schannel capitalization 2018-11-07 10:11:13 +01:00
schannel.h schannel: use Curl_ prefix for global private symbols 2018-11-01 09:39:45 +01:00
vtls.c axtls: removed 2018-11-01 10:29:53 +01:00
vtls.h axtls: removed 2018-11-01 10:29:53 +01:00