Class SSL.ServerConnection

Inheritance graph

Variable certificate_signature_scheme_1_3: protected int SSL.ServerConnection.certificate_signature_scheme_1_3
Description: TLS 1.3 (RFC 8446 section 4.2.3): the signature scheme chosen alongside session->certificate_chain in reply_new_session_1_3() (not set when resuming via PSK, which sends no CertificateVerify at all) -- remembered here since certificate/scheme selection and the later certificate_verify_packet() call happen in different parts of that function.

Variable client_offered_psk_dhe_ke: protected bool SSL.ServerConnection.client_offered_psk_dhe_ke
Description: TLS 1.3 (RFC 8446 section 4.2.9): true once we've seen the client's ClientHello offer PSK_KE_psk_dhe_ke in its EXTENSION_psk_key_exchange_modes -- gates whether we bother issuing a HANDSHAKE_new_session_ticket after the handshake completes (a client that can't use one has no use for it).

Variable hello_retry_group: protected int SSL.ServerConnection.hello_retry_group
Description: The group named in our HelloRetryRequest, if any -- the second ClientHello's EXTENSION_key_share must supply exactly this group.

Variable sent_hello_retry_request: protected bool SSL.ServerConnection.sent_hello_retry_request
Description: TLS 1.3 (RFC 8446 section 4.1.4) HelloRetryRequest state: set once we've sent one, since a server MUST NOT send more than one.