From eaa8f5f24c91877b25c444a4fbddb5b5ee30f683 Mon Sep 17 00:00:00 2001 From: Nikos Mavrogiannopoulos Date: Fri, 15 Apr 2016 10:14:22 +0200 Subject: doc: further updated documentation on false start [ci skip] --- doc/cha-intro-tls.texi | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'doc') diff --git a/doc/cha-intro-tls.texi b/doc/cha-intro-tls.texi index 60c289640e..842939a628 100644 --- a/doc/cha-intro-tls.texi +++ b/doc/cha-intro-tls.texi @@ -652,6 +652,11 @@ to request an early return of the @funcref{gnutls_handshake} function. After tha return the application is expected to transfer any data to be piggybacked on the last handshake message. +After handshake's early termination, the application is expected to call +@funcref{gnutls_record_recv} on any received data as soon, to ensure that handshake +completes timely. That is, especially relevant for applications which set an explicit +time limit for the handshake process via @funcref{gnutls_handshake_set_timeout}. + Note however, that the API ensures that the early return will not happen if the false start requirements are not satisfied. That is on ciphersuites which are not whitelisted for false start (see @xcite{draft-ietf-tls-falsestart-01}), the handshake -- cgit v1.2.1