diff options
| author | David Benjamin <davidben@chromium.org> | 2014-11-20 22:54:14 +0300 |
|---|---|---|
| committer | Adam Langley <agl@google.com> | 2014-11-22 00:51:10 +0300 |
| commit | d1681e614f8c3b4105efc42fb1fd35bd3ec09547 (patch) | |
| tree | 4dac317d54035223fb85ba31bc6be3c34d12dcfc /include/openssl/tls1.h | |
| parent | fe8eb9a6031aedf6426e2dda2ffcdb274fa5c9c1 (diff) | |
Remove SSL_set_session_secret_cb (EAP-FAST)
This is only used for EAP-FAST which we apparently don't need to support.
Remove it outright. We broke it in 9eaeef81fa2d4fd6246dc02b6203fa936a5eaf67 by
failing to account for session misses.
If this changes and we need it later, we can resurrect it. Preferably
implemented differently: the current implementation is bolted badly onto the
handshake. Ideally use the supplied callbacks to fabricate an appropriate
SSL_SESSION and resume that with as much of the normal session ticket flow as
possible.
The one difference is that EAP-FAST seems to require the probing mechanism for
session tickets rather than the sane session ID echoing version. We can
reimplement that by asking the record layer to probe ahead for one byte.
Change-Id: I38304953cc36b2020611556a91e8ac091691edac
Reviewed-on: https://boringssl-review.googlesource.com/2360
Reviewed-by: Adam Langley <agl@google.com>
Diffstat (limited to 'include/openssl/tls1.h')
| -rw-r--r-- | include/openssl/tls1.h | 8 |
1 files changed, 0 insertions, 8 deletions
diff --git a/include/openssl/tls1.h b/include/openssl/tls1.h index dc106d2c..d448ce23 100644 --- a/include/openssl/tls1.h +++ b/include/openssl/tls1.h @@ -708,14 +708,6 @@ SSL_CTX_callback_ctrl(ssl,SSL_CTRL_SET_TLSEXT_TICKET_KEY_CB,(void (*)(void))cb) #define TLS_MD_EXTENDED_MASTER_SECRET_CONST "extended master secret" #define TLS_MD_EXTENDED_MASTER_SECRET_CONST_SIZE 22 - -/* TLS Session Ticket extension struct */ -struct tls_session_ticket_ext_st - { - unsigned short length; - void *data; - }; - #ifdef __cplusplus } #endif |