Provide SSL_SESSION_get_master_key()

diff --git a/lib/libssl/Symbols.list b/lib/libssl/Symbols.list
index 90e73be..b20f29a 100644 (file)
--- a/lib/libssl/Symbols.list
+++ b/lib/libssl/Symbols.list
@@ -134,6 +134,7 @@ SSL_SESSION_get_compress_id
 SSL_SESSION_get_ex_data
 SSL_SESSION_get_ex_new_index
 SSL_SESSION_get_id
+SSL_SESSION_get_master_key
 SSL_SESSION_get_time
 SSL_SESSION_get_timeout
 SSL_SESSION_new

diff --git a/lib/libssl/ssl.h b/lib/libssl/ssl.h
index 692bd1a..1b7a3fb 100644 (file)
--- a/lib/libssl/ssl.h
+++ b/lib/libssl/ssl.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl.h,v 1.139 2018/02/17 15:19:43 jsing Exp $ */
+/* $OpenBSD: ssl.h,v 1.140 2018/02/17 15:32:20 jsing Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -1277,6 +1277,8 @@ const char *SSL_state_string(const SSL *s);
 const char *SSL_rstate_string(const SSL *s);
 const char *SSL_state_string_long(const SSL *s);
 const char *SSL_rstate_string_long(const SSL *s);
+size_t SSL_SESSION_get_master_key(const SSL_SESSION *ss,
+           unsigned char *out, size_t max_out);
 long   SSL_SESSION_get_time(const SSL_SESSION *s);
 long   SSL_SESSION_set_time(SSL_SESSION *s, long t);
 long   SSL_SESSION_get_timeout(const SSL_SESSION *s);

diff --git a/lib/libssl/ssl_sess.c b/lib/libssl/ssl_sess.c
index 59d7d9e..70c6daa 100644 (file)
--- a/lib/libssl/ssl_sess.c
+++ b/lib/libssl/ssl_sess.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl_sess.c,v 1.71 2017/04/10 17:27:33 jsing Exp $ */
+/* $OpenBSD: ssl_sess.c,v 1.72 2018/02/17 15:32:20 jsing Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -753,6 +753,23 @@ SSL_set_session(SSL *s, SSL_SESSION *session)
        return (ret);
 }
 
+size_t
+SSL_SESSION_get_master_key(const SSL_SESSION *ss, unsigned char *out,
+    size_t max_out)
+{
+       size_t len = ss->master_key_length;
+
+       if (out == NULL)
+               return len;
+
+       if (len > max_out)
+               len = max_out;
+
+       memcpy(out, ss->master_key, len);
+
+       return len;
+}
+
 long
 SSL_SESSION_set_timeout(SSL_SESSION *s, long t)
 {