Method SSL.ServerConnection()->reply_new_session_1_3()

class SSL.ServerConnection

Method reply_new_session_1_3

protected int(-1..0) reply_new_session_1_3(array(int) cipher_suites, string(8bit) session_id, mapping(int:string(8bit)) client_key_shares, string(8bit) psk_identity, string(8bit) psk_binder, int binders_total_bytes, array(int) psk_modes)

Description

TLS 1.3 (RFC 8446 4) full 1-RTT server handshake flow, replacing reply_new_session()/the legacy ServerKeyExchange/ClientKeyExchange dance for version >= PROTOCOL_TLS_1_3.

Note

Client certificate authentication is not implemented yet -- see TLS13_PLAN.md. A group mismatch triggers a HelloRetryRequest (RFC 8446 section 4.1.4, see send_hello_retry_request_1_3()) rather than failing outright. A valid PSK offer (try_resume_psk_1_3()) resumes instead of doing a full certificate-based handshake, per RFC 8446 section 4.1.3 (Certificate/CertificateVerify are then omitted entirely).