diff options
| author | Michael Brown <mcb30@ipxe.org> | 2022-10-06 16:06:44 +0100 |
|---|---|---|
| committer | Michael Brown <mcb30@ipxe.org> | 2022-10-11 14:37:12 +0100 |
| commit | 1a7317e7d46f134f21244f6d272f90648beda4e7 (patch) | |
| tree | f9b9183152d4485a0e7277bcdb940268c08e7991 /src/include/ipxe/tls.h | |
| parent | 18b861024ad542bd6df337dfb10a84e04173040f (diff) | |
| download | ipxe-1a7317e7d46f134f21244f6d272f90648beda4e7.tar.gz | |
[tls] Generate master secret at point of sending ClientKeyExchange
The master secret is currently constructed upon receiving the
ServerHello message. This precludes the use of key exchange
mechanisms such as Ephemeral Diffie-Hellman (DHE), which require a
ServerKeyExchange message to exchange additional key material before
the pre-master secret and master secret can be constructed.
Allow for the use of such cipher suites by deferring generation of the
master secret until the point of sending the ClientKeyExchange
message.
Signed-off-by: Michael Brown <mcb30@ipxe.org>
Diffstat (limited to 'src/include/ipxe/tls.h')
0 files changed, 0 insertions, 0 deletions