tls-crypto: Add method to hash handshake data and use result as initial transcript

This is used for HelloRetryRequest.
2021-02-12 11:45:44 +01:00
parent 64e63c68c8
commit 2271d67f07
2 changed files with 33 additions and 0 deletions
@@ -474,6 +474,14 @@ struct tls_crypto_t {
 	void (*append_handshake)(tls_crypto_t *this,
 							 tls_handshake_type_t type, chunk_t data);

+	/**
+	 * Hash the stored handshake data and store it.  It is optionally returned
+	 * so it could be sent in a cookie extension.
+	 *
+	 * @param hash			optionally returned hash (allocated)
+	 */
+	bool (*hash_handshake)(tls_crypto_t *this, chunk_t *hash);
+
 	/**
 	 * Sign a blob of data, append signature to writer.
 	 *