tls-peer: Handle HelloRetryRequest

Adds support to handle retries with different DH group and/or a cookie extension.
2021-02-12 11:45:44 +01:00
parent 2271d67f07
commit 2b6565c236
3 changed files with 154 additions and 8 deletions
@@ -122,6 +122,13 @@ ENUM_NEXT(tls_extension_names,
 	"renegotiation info");
 ENUM_END(tls_extension_names, TLS_EXT_RENEGOTIATION_INFO);

+chunk_t tls_hello_retry_request_magic = chunk_from_chars(
+	0xCF, 0x21, 0xAD, 0x74, 0xE5, 0x9A, 0x61, 0x11,
+	0xBE, 0x1D, 0x8C, 0x02, 0x1E, 0x65, 0xB8, 0x91,
+	0xC2, 0xA2, 0x11, 0x16, 0x7A, 0xBB, 0x8C, 0x5E,
+	0x07, 0x9E, 0x09, 0xE2, 0xC8, 0xA8, 0x33, 0x9C,
+);
+
 /**
 * TLS record
 */