yuzu-emu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2024-11-23 08:45:50 +01:00
Code Issues Packages Projects Releases Wiki Activity

Improve documentation about HelloVerifyRequest

Browse Source
This commit is contained in:
Manuel Pégourié-Gonnard 2015-05-28 15:24:25 +02:00
parent 398b206ff0
commit b48ef9cce9
1 changed files with 12 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
include/mbedtls/ssl.h
View File

@ -1141,7 +1141,7 @@ typedef int mbedtls_ssl_cookie_check_t( void *ctx,
* \brief Register callbacks for DTLS cookies * \brief Register callbacks for DTLS cookies
* (Server only. DTLS only.) * (Server only. DTLS only.)
* *
* Default: dummy callbacks that fail, to force you to * Default: dummy callbacks that fail, in order to force you to
* register working callbacks (and initialize their context). * register working callbacks (and initialize their context).
* *
* To disable HelloVerifyRequest, register NULL callbacks. * To disable HelloVerifyRequest, register NULL callbacks.
@ -1151,6 +1151,10 @@ typedef int mbedtls_ssl_cookie_check_t( void *ctx,
* Only disable if you known this can't happen in your * Only disable if you known this can't happen in your
* particular environment. * particular environment.
* *
* \note See comments on \c mbedtls_ssl_handshake() about handling
* the MBEDTLS_ERR_SSL_HELLO_VERIFY_REQUIRED that is expected
* on the first handshake attempt when this is enabled.
*
* \param conf SSL configuration * \param conf SSL configuration
* \param f_cookie_write Cookie write callback * \param f_cookie_write Cookie write callback
* \param f_cookie_check Cookie check callback * \param f_cookie_check Cookie check callback
@ -1980,6 +1984,13 @@ int mbedtls_ssl_get_session( const mbedtls_ssl_context *ssl, mbedtls_ssl_session
* *
* \return 0 if successful, MBEDTLS_ERR_SSL_WANT_READ, * \return 0 if successful, MBEDTLS_ERR_SSL_WANT_READ,
* MBEDTLS_ERR_SSL_WANT_WRITE, or a specific SSL error code. * MBEDTLS_ERR_SSL_WANT_WRITE, or a specific SSL error code.
*
* \note If this function returns non-zero, then the ssl context
* becomes unusable, and you should either free it or call
* \c mbedtls_ssl_session_reset() on it before re-using it.
* If DTLS is in use, then you may choose to handle
* MBEDTLS_ERR_SSL_HELLO_VERIFY_REQUIRED specially for logging
* purposes, but you still need to reset/free the context.
*/ */
int mbedtls_ssl_handshake( mbedtls_ssl_context *ssl ); int mbedtls_ssl_handshake( mbedtls_ssl_context *ssl );