Correct server-side handling of TLSv1.3 key updates.
authorjsing <jsing@openbsd.org>
Wed, 20 Jul 2022 06:20:44 +0000 (06:20 +0000)
committerjsing <jsing@openbsd.org>
Wed, 20 Jul 2022 06:20:44 +0000 (06:20 +0000)
commit622f173fe044608da8e31c2322e322ee7e98b0b7
tree3c1d84ddb744856d94e0b600339d9d87f13a5fca
parentfa1720442ff60eb2601551424c2ea49e9b66d416
Correct server-side handling of TLSv1.3 key updates.

The existing code updates the correct secret, however then sets it for the
wrong direction. Fix this, while untangling the code and consistenly using
'read' and 'write' rather than 'local' and 'peer'.

ok beck@ tb@
lib/libssl/tls13_lib.c