Add code to handle change of cipher state in the new TLSv1.2 record layer.
authorjsing <jsing@openbsd.org>
Tue, 19 Jan 2021 19:07:39 +0000 (19:07 +0000)
committerjsing <jsing@openbsd.org>
Tue, 19 Jan 2021 19:07:39 +0000 (19:07 +0000)
commita802a16adaa92c0a0d3b8521ebf2eaf7341efd30
tree3594e3ea263f5f0bcfcab515c135e3ce2ebf446b
parent1365e68c83704aebdea192474b3f2c00ac46542b
Add code to handle change of cipher state in the new TLSv1.2 record layer.

This provides the basic framework for handling change of cipher state in
the new TLSv1.2 record layer, creating new record protection. In the DTLS
case we retain the previous write record protection and can switch back to
it when retransmitting. This will allow the record layer to start owning
sequence numbers and encryption/decryption state.

ok inoguchi@ tb@
lib/libssl/d1_both.c
lib/libssl/d1_pkt.c
lib/libssl/ssl_locl.h
lib/libssl/t1_enc.c
lib/libssl/tls12_record_layer.c