Comparison

net/server_epoll.lua @ 12594:29685403be32

mod_saslauth: Implement RFC 9266 'tls-exporter' channel binding (#1760) Brings back SCRAM-SHA-*-PLUS from its hiatus brought on by the earlier channel binding method being undefined for TLS 1.3, and the increasing deployment of TLS 1.3. See 1bfd238e05ad and #1542 Requires future version of LuaSec, once support for this key material export method is merged. See https://github.com/brunoos/luasec/pull/187
author Kim Alvefur <zash@zash.se>
date Wed, 01 Jun 2022 15:06:59 +0200
parent 12542:5ec9d6913162
child 12827:0605d4f03e25
comparison
equal deleted inserted replaced
12591:494577d883ff 12594:29685403be32
646 function interface:ssl_peerfinished() 646 function interface:ssl_peerfinished()
647 local sock = self.conn; 647 local sock = self.conn;
648 if not sock.getpeerfinished then return nil, "not-implemented"; end 648 if not sock.getpeerfinished then return nil, "not-implemented"; end
649 return sock:getpeerfinished(); 649 return sock:getpeerfinished();
650 end 650 end
651
652 function interface:ssl_exportkeyingmaterial(label, len, context)
653 local sock = self.conn;
654 if sock.exportkeyingmaterial then
655 return sock:exportkeyingmaterial(label, len, context);
656 end
657 end
658
651 659
652 function interface:starttls(tls_ctx) 660 function interface:starttls(tls_ctx)
653 if tls_ctx then self.tls_ctx = tls_ctx; end 661 if tls_ctx then self.tls_ctx = tls_ctx; end
654 self.starttls = false; 662 self.starttls = false;
655 if self.writebuffer and (self.writebuffer[1] or type(self.writebuffer) == "string") then 663 if self.writebuffer and (self.writebuffer[1] or type(self.writebuffer) == "string") then