*/if(SSL_is_server(peer->ssl)) ret = SSL_renegotiate(peer->ssl);elseret = SSL_renegotiate_abbreviated(peer->ssl);if(!ret) { peer->status = PEER_ERROR;return; } do_handshake_step(peer);/* * If status is PEER_RETRY it means we're waiting on the peer to * continue the handshake...
重新磋商 TLS 1.3没有重新磋商机制,所以在TLS 1.3环境下,对SSL_renegotiate()和SSL_renegotiate_abbreviated()的调用会立即失败。 重新磋商最常见的例子是更新连接密钥。再TLS 1.3中,函数SSL_key_update()可以用于的这个目的(看这里)。 DSA证书 TLS 1.3中不再允许DSA证书。如果你的服务器应用程序正在使用DSA证书,那...
com.ibm.jsse2.renegotiate Use this property to change the renegotiation ability of IBM JSSE2. The default value is NONE. Valid values are: ABBREVIATED - This setting overrides and allows unsecured abbreviated handshake during renegotiation when session continuity is proven. RFC 5746 renegotiations are...
There is SSL_renegotiate (and SSL_renegotiate_abbreviated, and SSL_renegotiate_pending) but not documented and I haven't used them and I don't have time to go through the code. I do see s_server.c has two cases of SSL_renegotiate followed by SSL_do_handshake, one followed by SSL_writ...
int SSL_renegotiate_abbreviated ( SSL * s ) Definition at line 1033 of file ssl_lib.c.int SSL_renegotiate_pending ( SSL * s ) Definition at line 1043 of file ssl_lib.c.EVP_MD_CTX* ssl_replace_hash ( EVP_MD_CTX ** hash, const EVP_MD * md ) Definition at line 3220 of...
TLS/SSL and crypto library. Contribute to openssl/openssl development by creating an account on GitHub.
ret = SSL_renegotiate(peer->ssl);elseret = SSL_renegotiate_abbreviated(peer->ssl);if(!ret) { peer->status = PEER_ERROR;return; } do_handshake_step(peer);/* * If status is PEER_RETRY it means we're waiting on the peer to