diff options
| author | Frantisek Krenzelok <krenzelok.frantisek@gmail.com> | 2022-03-18 11:37:10 +0100 |
|---|---|---|
| committer | Frantisek Krenzelok <krenzelok.frantisek@gmail.com> | 2022-03-29 12:13:55 +0200 |
| commit | 4b58324309913caf70ae980cc7b3613cb3a51df6 (patch) | |
| tree | f21ec571c005bf1b40a8d4c4b17a95dccbeca4e6 /lib/handshake.c | |
| parent | 9860846b66e4c698c60a3b343dcb3ba49c77e096 (diff) | |
| download | gnutls-4b58324309913caf70ae980cc7b3613cb3a51df6.tar.gz | |
system config disable KTLS
Added option for system config `ktls = false` to disable ktls
system-wide
Signed-off-by: Frantisek Krenzelok <krenzelok.frantisek@gmail.com>
Diffstat (limited to 'lib/handshake.c')
| -rw-r--r-- | lib/handshake.c | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/lib/handshake.c b/lib/handshake.c index 44c4cc3402..f3edbbdacb 100644 --- a/lib/handshake.c +++ b/lib/handshake.c @@ -2813,8 +2813,10 @@ int gnutls_handshake(gnutls_session_t session) const version_entry_st *vers = get_version(session); int ret; + session->internals.ktls_enabled = 0; #ifdef ENABLE_KTLS - _gnutls_ktls_enable(session); + if (_gnutls_config_is_ktls_disabled() == false) + _gnutls_ktls_enable(session); #endif if (unlikely(session->internals.initial_negotiation_completed)) { @@ -2913,11 +2915,9 @@ int gnutls_handshake(gnutls_session_t session) } #ifdef ENABLE_KTLS - if (IS_KTLS_ENABLED(session, GNUTLS_KTLS_RECV) || IS_KTLS_ENABLED(session, GNUTLS_KTLS_SEND)) { + if (IS_KTLS_ENABLED(session, GNUTLS_KTLS_DUPLEX)) { _gnutls_ktls_set_keys(session); } -#else - session->internals.ktls_enabled = 0; #endif return 0; |