keylogfile: generalize with a callbacktmp-keylog-hook

This refactors the keylogfile mechanism by adding a callback to get
notified when a new secret is derived and installed.  That way,
consumers can implement custom logging feature per session, which is
particularly useful in QUIC implementation.

Signed-off-by: Daiki Ueno <dueno@redhat.com>

1 files changed, 7 insertions, 0 deletions

diff --git a/lib/kx.h b/lib/kx.h
index 2d98fda3cd..8d8d4225ef 100644
--- a/lib/kx.h
+++ b/lib/kx.h
@@ -38,8 +38,15 @@ int _gnutls_recv_server_crt_request(gnutls_session_t session);
 int _gnutls_send_server_crt_request(gnutls_session_t session, int again);
 int _gnutls_recv_client_certificate_verify_message(gnutls_session_t
 						   session);
+int _gnutls_call_secret_func(gnutls_session_t session,
+			     gnutls_handshake_secret_type_t type,
+			     const uint8_t *data,
+			     unsigned size);
 void _gnutls_nss_keylog_write(gnutls_session_t session,
 			      const char *label,
 			      const uint8_t *secret, size_t secret_size);
+int _gnutls_nss_keylog_secret_func(gnutls_session_t session,
+				   gnutls_handshake_secret_type_t type,
+				   const gnutls_datum_t *secret);
 
 #endif /* GNUTLS_LIB_KX_H */