diff options
| author | Daiki Ueno <dueno@redhat.com> | 2020-03-30 11:27:40 +0200 |
|---|---|---|
| committer | Daiki Ueno <dueno@redhat.com> | 2020-04-13 08:02:05 +0200 |
| commit | ced929668e1657d9c8d557dd48b2661077f41b11 (patch) | |
| tree | dbc15d5b46012ecb97e0ac20e2e350288caf440b /lib/includes/gnutls | |
| parent | de9d244f955d6858cc03006a36cd23656e74442e (diff) | |
| download | gnutls-ced929668e1657d9c8d557dd48b2661077f41b11.tar.gz | |
handshake-tls13: add session flag to disable sending session ticketstmp-no-auto-send-ticket
While GnuTLS by default implicitly sends NewSessionTicket during
handshake, application protocols like QUIC set a clear boundary
between "in handshake" and "post handshake", and NST must be sent in
the post handshake state.
Signed-off-by: Daiki Ueno <dueno@redhat.com>
Diffstat (limited to 'lib/includes/gnutls')
| -rw-r--r-- | lib/includes/gnutls/gnutls.h.in | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/lib/includes/gnutls/gnutls.h.in b/lib/includes/gnutls/gnutls.h.in index a6c3c0ef30..517153634a 100644 --- a/lib/includes/gnutls/gnutls.h.in +++ b/lib/includes/gnutls/gnutls.h.in @@ -461,6 +461,8 @@ typedef enum { * @GNUTLS_ENABLE_EARLY_DATA: Under TLS1.3 allow the server to receive early data sent as part of the initial ClientHello (0-RTT). * This is not enabled by default as early data has weaker security properties than other data. Since 3.6.5. * @GNUTLS_ENABLE_RAWPK: Allows raw public-keys to be negotiated during the handshake. Since 3.6.6. + * @GNUTLS_NO_AUTO_SEND_TICKET: Under TLS1.3 disable auto-sending of + * session tickets during the handshake. * * Enumeration of different flags for gnutls_init() function. All the flags * can be combined except @GNUTLS_SERVER and @GNUTLS_CLIENT which are mutually @@ -491,7 +493,8 @@ typedef enum { GNUTLS_ENABLE_EARLY_START = (1<<17), GNUTLS_ENABLE_RAWPK = (1<<18), GNUTLS_AUTO_REAUTH = (1<<19), - GNUTLS_ENABLE_EARLY_DATA = (1<<20) + GNUTLS_ENABLE_EARLY_DATA = (1<<20), + GNUTLS_NO_AUTO_SEND_TICKET = (1<<21) } gnutls_init_flags_t; /* compatibility defines (previous versions of gnutls |