ARMmbed/mbedtls
1
0
Fork 0
mirror of https://github.com/ARMmbed/mbedtls.git synced 2025-06-25 22:56:35 +08:00
Code Issues Releases Wiki Activity

tls13: early_data: cli: improve comment

Browse Source 
This commit improves comment of why we assign the identifier of the
ciphersuite in handshake to `ssl->session_negotiate`.

Signed-off-by: Yanray Wang <yanray.wang@arm.com>
This commit is contained in:
Yanray Wang 2023-12-01 17:46:06 +08:00
parent 03a00768c0
commit 9ae6534c20
1 changed files with 8 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
library/ssl_tls13_client.c
View File

@ -2207,13 +2207,14 @@ static int ssl_tls13_process_encrypted_extensions(mbedtls_ssl_context *ssl)
#endif #endif
/* /*
* Move `session_negotiate->ciphersuite` assignment here which after * In case the client has proposed a PSK associated with a ticket,
* early data cipher suite check. * `ssl->session_negotiate->ciphersuite` still contains at this point the
* * identifier of the ciphersuite associated with the ticket. This is that
* We compute transform_handshake by the cipher suite chosen from * way because, if an exchange of early data is agreed upon, we need
* the server in `handshake`. `session_negotiate->ciphersuite` is the * it to check that the ciphersuite selected for the handshake is the
* cipher suite negotiated in previous connection and it is not used for * ticket ciphersuite (see above). This information is not needed
* computing transform_handshake. * anymore thus we can now set it to the identifier of the ciphersuite
* used in this session under negotiation.
*/ */
ssl->session_negotiate->ciphersuite = handshake->ciphersuite_info->id; ssl->session_negotiate->ciphersuite = handshake->ciphersuite_info->id;