Replies: 2 comments 1 reply
-
this is the feature request to expose key_update API. something like openssl SSL_key_update() at openssl |
Beta Was this translation helpful? Give feedback.
1 reply
-
resolved. see last comments |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
I want to send key_update message in a controlled way under PSK connection on TLS 1.3. Although I didn't find any example for sending key_update message, I found the following functions at TlsProtocols.java.
protected void send13KeyUpdate(boolean updateRequested) throws IOException
protected void receive13KeyUpdate(ByteArrayInputStream buf) throws IOException
based on the Tls13PSKProtocolTest.java, it seems that the application can call send13KeyUpdate() directly. but at the function
public void writeApplicationData(byte[] buf, int off, int len)
else if (keyUpdateEnabled)
{
if (keyUpdatePendingSend)
{
send13KeyUpdate(false);
}
else if (recordStream.needsKeyUpdate())
{
send13KeyUpdate(true);
}
}
I don't know what the influence about send13KeyUpdate() inside writeApplicationData() on the application? Is there any suggestions?
thanks!
Beta Was this translation helpful? Give feedback.
All reactions