generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Add SSL_SESSION_get0_ticket API function.

Browse Source 
Reviewed-by: Tim Hudson <tjh@openssl.org>
This commit is contained in:
Matt Caswell
2015-02-08 23:37:54 +00:00
parent ea6bd26454
commit b7c9187b32
3 changed files with 21 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
doc/ssl/SSL_SESSION_has_ticket.pod
View File

@@ -2,7 +2,7 @@
=head1 NAME =head1 NAME
SSL_SESSION_has_ticket, SSL_SESSION_get_ticket_lifetime_hint - check whether a session has an associated ticket, and get its lifetime hint. SSL_SESSION_has_ticket, SSL_SESSION_get_ticket_lifetime_hint, SSL_SESSION_get_ticket - get details about the ticket associated with a session
=head1 SYNOPSIS =head1 SYNOPSIS
@@ -10,6 +10,8 @@ SSL_SESSION_has_ticket, SSL_SESSION_get_ticket_lifetime_hint - check whether a s
int SSL_SESSION_has_ticket(const SSL_SESSION *s); int SSL_SESSION_has_ticket(const SSL_SESSION *s);
unsigned long SSL_SESSION_get_ticket_lifetime_hint(const SSL_SESSION *s); unsigned long SSL_SESSION_get_ticket_lifetime_hint(const SSL_SESSION *s);
void SSL_SESSION_get0_ticket(const SSL_SESSION *s, unsigned char **tick,
size_t *len);
=head1 DESCRIPTION =head1 DESCRIPTION
@@ -19,6 +21,12 @@ this session, and 0 otherwise.
SSL_SESSION_get_ticket_lifetime_hint returns the lifetime hint in seconds SSL_SESSION_get_ticket_lifetime_hint returns the lifetime hint in seconds
associated with the session ticket. associated with the session ticket.
SSL_SESSION_get0_ticket obtains a pointer to the ticket associated with a
session. The length of the ticket is written to B<*len>. If B<tick> is non
NULL then a pointer to the ticket is written to B<*tick>. The pointer is only
valid while the connection is in use. The session (and hence the ticket pointer)
may also become invalid as a result of a call to SSL_CTX_flush_sessions().
=head1 SEE ALSO =head1 SEE ALSO
L<ssl(3)|ssl(3)>, L<ssl(3)|ssl(3)>,
@@ -28,7 +36,7 @@ L<SSL_SESSION_free(3)|SSL_SESSION_free(3)>
=head1 HISTORY =head1 HISTORY
SSL_SESSION_has_ticket and SSL_SESSION_get_ticket_lifetime_hint were added in SSL_SESSION_has_ticket, SSL_SESSION_get_ticket_lifetime_hint and
OpenSSL 1.1.0. SSL_SESSION_get0_ticket were added in OpenSSL 1.1.0.
=cut =cut

2
ssl/ssl.h
View File

@@ -1462,6 +1462,8 @@ long SSL_SESSION_get_timeout(const SSL_SESSION *s);
long SSL_SESSION_set_timeout(SSL_SESSION *s, long t); long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
int SSL_SESSION_has_ticket(const SSL_SESSION *s); int SSL_SESSION_has_ticket(const SSL_SESSION *s);
unsigned long SSL_SESSION_get_ticket_lifetime_hint(const SSL_SESSION *s); unsigned long SSL_SESSION_get_ticket_lifetime_hint(const SSL_SESSION *s);
void SSL_SESSION_get0_ticket(const SSL_SESSION *s, unsigned char **tick,
size_t *len);
void SSL_copy_session_id(SSL *to, const SSL *from); void SSL_copy_session_id(SSL *to, const SSL *from);
X509 *SSL_SESSION_get0_peer(SSL_SESSION *s); X509 *SSL_SESSION_get0_peer(SSL_SESSION *s);
int SSL_SESSION_set1_id_context(SSL_SESSION *s, const unsigned char *sid_ctx, int SSL_SESSION_set1_id_context(SSL_SESSION *s, const unsigned char *sid_ctx,

8
ssl/ssl_sess.c
View File

@@ -858,6 +858,14 @@ unsigned long SSL_SESSION_get_ticket_lifetime_hint(const SSL_SESSION *s)
return s->tlsext_tick_lifetime_hint; return s->tlsext_tick_lifetime_hint;
} }
void SSL_SESSION_get0_ticket(const SSL_SESSION *s, unsigned char **tick,
size_t *len)
{
*len = s->tlsext_ticklen;
if(tick != NULL)
*tick = s->tlsext_tick;
}
X509 *SSL_SESSION_get0_peer(SSL_SESSION *s) X509 *SSL_SESSION_get0_peer(SSL_SESSION *s)
{ {
return s->peer; return s->peer;