arduino/esp8266
1
0
Fork 0
mirror of https://github.com/esp8266/Arduino.git synced 2025-06-12 01:53:07 +03:00
Code Activity

Fix MFLN probe and allow returning whether MFLN succeeded or not after a connection. (#6000)

Browse Source 
Fixes #5996

* Add extensions to probe message for EC, others

probeMFLN was failing on some connection attempts to servers which only
supported EC based ciphers because it did not include the proper TLS
handshake extensions to list what kinds of ECs it supported.

Add those to the probeMFLN ClientHello message to make probes pass.

* Add client.getMFLNStatus method, returns MFLN state

After a connection it is useful to check whether MFLN negotiation
succeeded.  getMFLNStatus returns a bool (valid only after
client.connect() succeeds, of course) indicating whether the requested
buffer sizes were negotiated successfully.
This commit is contained in:
Earle F. Philhower, III
2019-04-25 12:40:26 -07:00
committed by GitHub
parent d9b0480f09
commit f6dd826437
10 changed files with 73 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
tools/sdk/include/bearssl/bearssl_ssl.h
View File

@ -864,6 +864,7 @@ typedef struct {
*/
uint16_t max_frag_len;
unsigned char log_max_frag_len;
unsigned char max_frag_len_negotiated;
unsigned char peer_log_max_frag_len;
/*
@ -1830,6 +1831,17 @@ void br_ssl_engine_set_buffer(br_ssl_engine_context *cc,
void br_ssl_engine_set_buffers_bidi(br_ssl_engine_context *cc,
void *ibuf, size_t ibuf_len, void *obuf, size_t obuf_len);
/**
* \brief Determine if MFLN negotiation was successful
*
* \param cc SSL engine context.
*/
static inline uint8_t
br_ssl_engine_get_mfln_negotiated(br_ssl_engine_context *cc)
{
return cc->max_frag_len_negotiated;
}
/**
* \brief Inject some "initial entropy" in the context.
*