CVSROOT: /cvs
Module name: src
Changes by: js...@cvs.openbsd.org 2017/07/16 12:14:37
Modified files:
lib/libssl : Makefile t1_lib.c
Added files:
lib/libssl : ssl_tlsext.c ssl_tlsext.h
Log message:
Start rewriting TLS extension handling.
Introduce a TLS extension handling framework that has per-extension type
functions to determine if an extension is needed, to build the extension
data and parse the extension data. This is somewhat analogous to BoringSSL,
however these build and parse functions are intentionally symetrical. The
framework is hooked into the existing TLS handling code in such a way that
we can gradual convert the extension handling code.
Convert the TLS Server Name Indication extension to the new framework,
while rewriting it to use CBB/CBS and be more strict in the process.
Discussed with beck@
ok inoguchi@
