boringssl

Mirror of BoringSSL (grpc依赖) https://boringssl.googlesource.com/boringssl

David Benjamin 10a76acb0f Only clear not_resumable after the handshake. In renegotiation handshakes and, later, ECH ClientHelloOuter handshakes, we don't want to add sessions to the session cache. We also don't want to release a session as resumable until the handshake completes. Ideally we'd only construct SSL_SESSION at the end of the handshake, but existing APIs like SSL_get_session must work mid-handshake, so SSL_SESSION is both a handle to immutable resumption state, and a container for in-progress connection properties. We manage this with a not_resumable flag that's only cleared after the handshake is done and the SSL_SESSION finalized. However, TLS 1.2 ticket renewal currently clears the flag too early and breaks the invariant. This won't actually affect renegotiation or ClientHelloOuter because those handshakes never resume. Still, we can maintain the invariant storing the copy in hs->new_session. Note this does sacrifice a different invariant: previously, ssl->session and hs->new_session were never set at the same time. This change also means ssl_update_cache does not need to special-case ticket renewal. Change-Id: I03230cd9c63e5bee6bd60cd05c0439e16533c6d4 Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/48132 Commit-Queue: David Benjamin <davidben@google.com> Reviewed-by: Adam Langley <agl@google.com>		3 years ago
..
test	runner: Test that clients actually use renewed tickets.	3 years ago
CMakeLists.txt	Rename t1_lib.cc to extensions.cc.	3 years ago
bio_ssl.cc	…
d1_both.cc	Const-correct message creation hooks.	4 years ago
d1_lib.cc	…
d1_pkt.cc	…
d1_srtp.cc	…
dtls_method.cc	…
dtls_record.cc	…
encrypted_client_hello.cc	Validate ECH public names.	3 years ago
extensions.cc	Rename t1_lib.cc to extensions.cc.	3 years ago
handoff.cc	Rename SSL_ECH_SERVER_CONFIG_LIST to SSL_ECH_KEYS.	3 years ago
handshake.cc	Shift some complexity out of ssl_add_clienthello_tlsext.	3 years ago
handshake_client.cc	Only clear not_resumable after the handshake.	3 years ago
handshake_server.cc	Only clear not_resumable after the handshake.	3 years ago
internal.h	Unexport almost all of LHASH.	3 years ago
s3_both.cc	Const-correct message creation hooks.	4 years ago
s3_lib.cc	Add SSL_ech_accepted API and ech_is_required alerts.	4 years ago
s3_pkt.cc	…
span_test.cc	…
ssl_aead_ctx.cc	…
ssl_asn1.cc	…
ssl_buffer.cc	…
ssl_c_test.c	…
ssl_cert.cc	…
ssl_cipher.cc	…
ssl_file.cc	…
ssl_key_share.cc	…
ssl_lib.cc	Only clear not_resumable after the handshake.	3 years ago
ssl_privkey.cc	…
ssl_session.cc	…
ssl_stat.cc	Add SSL_ech_accepted API and ech_is_required alerts.	4 years ago
ssl_test.cc	Validate ECH public names.	3 years ago
ssl_transcript.cc	Tidy up the PSK binder logic.	3 years ago
ssl_versions.cc	Add most of an ECH client implementation.	3 years ago
ssl_x509.cc	…
t1_enc.cc	…
tls13_both.cc	Implement a handshake hint for certificate compression.	3 years ago
tls13_client.cc	Add most of an ECH client implementation.	3 years ago
tls13_enc.cc	Add most of an ECH client implementation.	3 years ago
tls13_server.cc	Add most of an ECH client implementation.	3 years ago
tls_method.cc	…
tls_record.cc	…