eden-emu/mbedtls
15
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

improve comments and output message

Browse source 
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
This commit is contained in:
Jerry Yu 2023-12-01 17:14:51 +08:00
parent ee4d729555
commit 0af63dc263
1 changed files with 4 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

22
library/ssl_tls13_server.c
View file

@ -2835,22 +2835,7 @@ static int ssl_tls13_write_server_finished(mbedtls_ssl_context *ssl)
#if defined(MBEDTLS_SSL_EARLY_DATA) #if defined(MBEDTLS_SSL_EARLY_DATA)
if (ssl->early_data_status == MBEDTLS_SSL_EARLY_DATA_STATUS_ACCEPTED) { if (ssl->early_data_status == MBEDTLS_SSL_EARLY_DATA_STATUS_ACCEPTED) {
/* TODO: compute early transform here? /* See RFC 8446 section A.2 for more information */
*
* RFC 8446, section A.2
* | Send Finished
* | K_send = application
* +--------+--------+
* No 0-RTT | | 0-RTT
* | |
* | | K_recv = early data
* | +------> WAIT_EOED -+
*
* early transform is set after server finished in this section. But
* it breaks our key computation, so we put early transform computation
* at the end of client hello. For the time being, I am not sure the
* benifit for moving computation here.
*/
MBEDTLS_SSL_DEBUG_MSG( MBEDTLS_SSL_DEBUG_MSG(
1, ("Switch to early keys for inbound traffic. " 1, ("Switch to early keys for inbound traffic. "
"( K_recv = early data )")); "( K_recv = early data )"));
@ -2860,8 +2845,9 @@ static int ssl_tls13_write_server_finished(mbedtls_ssl_context *ssl)
return 0; return 0;
} }
#endif /* MBEDTLS_SSL_EARLY_DATA */ #endif /* MBEDTLS_SSL_EARLY_DATA */
MBEDTLS_SSL_DEBUG_MSG(
MBEDTLS_SSL_DEBUG_MSG(1, ("Switch to handshake keys for inbound traffic")); 1, ("Switch to handshake keys for inbound traffic "
"( K_recv = handshake )"));
mbedtls_ssl_set_inbound_transform(ssl, ssl->handshake->transform_handshake); mbedtls_ssl_set_inbound_transform(ssl, ssl->handshake->transform_handshake);
ssl_tls13_process_wait_flight2(ssl); ssl_tls13_process_wait_flight2(ssl);