[gnutls-devel] GnuTLS | gnutls-cli: Add option to wait longer for resumption data (!1232)

Development of GNU's TLS library gnutls-devel at lists.gnutls.org
Thu Apr 30 16:40:06 CEST 2020




Daiki Ueno commented on a discussion on src/cli.c: https://gitlab.com/gnutls/gnutls/-/merge_requests/1232#note_334543727

>  	gnutls_datum_t edata = {NULL, 0};
>  
>  	if (gnutls_session_is_resumed(hd->session) == 0) {
> -		/* not resumed - obtain the session data */
> -		ret = gnutls_session_get_data2(hd->session, &rdata);
> -		if (ret < 0) {
> -			rdata.data = NULL;
> -		}
> +		do {
> +			/* not resumed - obtain the session data */
> +			ret = gnutls_session_get_data2(hd->session, &rdata);

I missed to mention that clearly, but there is no point waiting in TLS 1.2, because NST is sent only during handshake in TLS 1.2 (see RFC5077).

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/1232#note_334543727
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20200430/448e3ac5/attachment.html>


More information about the Gnutls-devel mailing list