Lines Matching refs:ext
85 } else if (s->ext.early_data == SSL_EARLY_DATA_ACCEPTED) { in ossl_statem_server13_read_transition()
103 && s->ext.compress_certificate_sent) { in ossl_statem_server13_read_transition()
153 && s->ext.compress_certificate_sent) { in ossl_statem_server13_read_transition()
390 int *alg = sc->ext.compress_certificate_from_peer; in get_compressed_certificate_alg()
456 return sc->ext.server_cert_type == TLSEXT_cert_type_x509 in do_compressed_cert()
489 if (s->ext.extra_tickets_expected > 0) { in ossl_statem_server13_write_transition()
566 } else if (!s->ext.ticket_expected) { in ossl_statem_server13_write_transition()
590 if (!SSL_IS_FIRST_HANDSHAKE(s) && s->ext.extra_tickets_expected > 0) { in ossl_statem_server13_write_transition()
662 if (s->ext.ticket_expected) in ossl_statem_server_write_transition()
683 if (s->ext.status_expected) { in ossl_statem_server_write_transition()
716 } else if (s->ext.ticket_expected) { in ossl_statem_server_write_transition()
790 && s->ext.extra_tickets_expected == 0) { in ossl_statem_server_pre_work()
967 if (s->ext.early_data != SSL_EARLY_DATA_ACCEPTED in ossl_statem_server_post_work()
1038 s->ext.compress_certificate_from_peer[0] = TLSEXT_comp_cert_none; in ossl_statem_server_post_work()
1046 s->ext.compress_certificate_from_peer[0] = TLSEXT_comp_cert_none; in ossl_statem_server_post_work()
1972 && s->ext.session_secret_cb != NULL) { in tls_early_post_process_client_hello()
1981 if (s->ext.session_secret_cb(ssl, s->session->master_key, in tls_early_post_process_client_hello()
1984 s->ext.session_secret_cb_arg) in tls_early_post_process_client_hello()
2145 s->ext.status_expected = 0; in tls_handle_status_request()
2153 if (s->ext.status_type != TLSEXT_STATUSTYPE_nothing && sctx != NULL in tls_handle_status_request()
2154 && sctx->ext.status_cb != NULL) { in tls_handle_status_request()
2164 ret = sctx->ext.status_cb(SSL_CONNECTION_GET_SSL(s), in tls_handle_status_request()
2165 sctx->ext.status_arg); in tls_handle_status_request()
2169 s->ext.status_expected = 0; in tls_handle_status_request()
2173 if (s->ext.ocsp.resp) in tls_handle_status_request()
2174 s->ext.status_expected = 1; in tls_handle_status_request()
2198 if (sctx->ext.alpn_select_cb != NULL && s->s3.alpn_proposed != NULL) { in tls_handle_alpn()
2199 int r = sctx->ext.alpn_select_cb(SSL_CONNECTION_GET_SSL(s), in tls_handle_alpn()
2203 sctx->ext.alpn_select_cb_arg); in tls_handle_alpn()
2220 if (s->session->ext.alpn_selected == NULL in tls_handle_alpn()
2221 || selected_len != s->session->ext.alpn_selected_len in tls_handle_alpn()
2222 || memcmp(selected, s->session->ext.alpn_selected, in tls_handle_alpn()
2225 s->ext.early_data_ok = 0; in tls_handle_alpn()
2233 if (!ossl_assert(s->session->ext.alpn_selected == NULL)) { in tls_handle_alpn()
2238 s->session->ext.alpn_selected = OPENSSL_memdup(selected, in tls_handle_alpn()
2240 if (s->session->ext.alpn_selected == NULL) { in tls_handle_alpn()
2245 s->session->ext.alpn_selected_len = selected_len; in tls_handle_alpn()
2262 if (s->session->ext.alpn_selected != NULL) { in tls_handle_alpn()
2264 s->ext.early_data_ok = 0; in tls_handle_alpn()
2327 s->ext.ticket_expected = 0; in tls_post_process_client_hello()
3616 if (s->ext.client_cert_type == TLSEXT_cert_type_rpk) in tls_process_client_certificate()
3619 if (s->ext.client_cert_type != TLSEXT_cert_type_x509) { in tls_process_client_certificate()
3827 switch (s->ext.server_cert_type) { in tls_construct_server_certificate()
4003 if (tctx->ext.ticket_key_evp_cb != NULL || tctx->ext.ticket_key_cb != NULL) in construct_stateless_ticket()
4005 if (tctx->ext.ticket_key_evp_cb != NULL) in construct_stateless_ticket()
4010 if (tctx->ext.ticket_key_evp_cb != NULL) in construct_stateless_ticket()
4011 ret = tctx->ext.ticket_key_evp_cb(ssl, key_name, iv, ctx, in construct_stateless_ticket()
4015 else if (tctx->ext.ticket_key_cb != NULL) in construct_stateless_ticket()
4017 ret = tctx->ext.ticket_key_cb(ssl, key_name, iv, ctx, in construct_stateless_ticket()
4065 tctx->ext.secure->tick_aes_key, iv) in construct_stateless_ticket()
4066 || !ssl_hmac_init(hctx, tctx->ext.secure->tick_hmac_key, in construct_stateless_ticket()
4067 sizeof(tctx->ext.secure->tick_hmac_key), in construct_stateless_ticket()
4074 memcpy(key_name, tctx->ext.tick_key_name, in construct_stateless_ticket()
4075 sizeof(tctx->ext.tick_key_name)); in construct_stateless_ticket()
4154 if (s->ext.extra_tickets_expected > 0) in tls_update_ticket_counts()
4155 s->ext.extra_tickets_expected--; in tls_update_ticket_counts()
4210 s->session->ext.tick_age_add = age_add_u.age_add; in tls_construct_new_session_ticket()
4233 OPENSSL_free(s->session->ext.alpn_selected); in tls_construct_new_session_ticket()
4234 s->session->ext.alpn_selected = in tls_construct_new_session_ticket()
4236 if (s->session->ext.alpn_selected == NULL) { in tls_construct_new_session_ticket()
4237 s->session->ext.alpn_selected_len = 0; in tls_construct_new_session_ticket()
4241 s->session->ext.alpn_selected_len = s->s3.alpn_selected_len; in tls_construct_new_session_ticket()
4243 s->session->ext.max_early_data = s->max_early_data; in tls_construct_new_session_ticket()
4304 if (!WPACKET_put_bytes_u8(pkt, s->ext.status_type) in tls_construct_cert_status_body()
4305 || !WPACKET_sub_memcpy_u24(pkt, s->ext.ocsp.resp, in tls_construct_cert_status_body()
4306 s->ext.ocsp.resp_len)) { in tls_construct_cert_status_body()
4348 if (!PACKET_memdup(&next_proto, &s->ext.npn, &next_proto_len)) { in tls_process_next_proto()
4349 s->ext.npn_len = 0; in tls_process_next_proto()
4354 s->ext.npn_len = (unsigned char)next_proto_len; in tls_process_next_proto()
