mbedtls_ssl_session Struct Reference

#include <ssl.h>

Collaboration diagram for mbedtls_ssl_session:

Data Fields
unsigned char	private_mfl_code
uint16_t	private_record_size_limit
unsigned char	private_exported
uint8_t	private_endpoint
mbedtls_ssl_protocol_version	private_tls_version
mbedtls_time_t	private_start
int	private_ciphersuite
size_t	private_id_len
unsigned char	private_id [32]
unsigned char	private_master [48]
mbedtls_x509_crt *	private_peer_cert
uint32_t	private_verify_result
unsigned char *	private_ticket
size_t	private_ticket_len
uint32_t	private_ticket_lifetime
mbedtls_ms_time_t	private_ticket_creation_time
uint32_t	private_ticket_age_add
uint8_t	private_ticket_flags
uint8_t	private_resumption_key_len
unsigned char	private_resumption_key [MBEDTLS_SSL_TLS1_3_TICKET_RESUMPTION_KEY_LEN]
char *	private_hostname
char *	private_ticket_alpn
mbedtls_ms_time_t	private_ticket_reception_time
uint32_t	private_max_early_data_size
int	private_encrypt_then_mac
mbedtls_ssl_tls13_application_secrets	private_app_secrets

Detailed Description

Definition at line 1157 of file ssl.h.

Field Documentation

mbedtls_ssl_tls13_application_secrets mbedtls_ssl_session::private_app_secrets

Definition at line 1253 of file ssl.h.

int mbedtls_ssl_session::private_ciphersuite

chosen ciphersuite

Definition at line 1178 of file ssl.h.

int mbedtls_ssl_session::private_encrypt_then_mac

flag for EtM activation

Definition at line 1249 of file ssl.h.

uint8_t mbedtls_ssl_session::private_endpoint

0: client, 1: server

Definition at line 1168 of file ssl.h.

unsigned char mbedtls_ssl_session::private_exported

Definition at line 1167 of file ssl.h.

char* mbedtls_ssl_session::private_hostname

host name binded with tickets

Definition at line 1230 of file ssl.h.

unsigned char mbedtls_ssl_session::private_id[32]

session identifier

Definition at line 1180 of file ssl.h.

size_t mbedtls_ssl_session::private_id_len

session id length

Definition at line 1179 of file ssl.h.

unsigned char mbedtls_ssl_session::private_master[48]

the master secret

Definition at line 1181 of file ssl.h.

uint32_t mbedtls_ssl_session::private_max_early_data_size

maximum amount of early data in tickets

Definition at line 1245 of file ssl.h.

unsigned char mbedtls_ssl_session::private_mfl_code

MaxFragmentLength negotiated by peer

Definition at line 1159 of file ssl.h.

mbedtls_x509_crt* mbedtls_ssl_session::private_peer_cert

peer X.509 cert chain

Definition at line 1185 of file ssl.h.

uint16_t mbedtls_ssl_session::private_record_size_limit

< RecordSizeLimit received from the peer

Definition at line 1164 of file ssl.h.

unsigned char mbedtls_ssl_session::private_resumption_key[MBEDTLS_SSL_TLS1_3_TICKET_RESUMPTION_KEY_LEN]

Definition at line 1227 of file ssl.h.

uint8_t mbedtls_ssl_session::private_resumption_key_len

resumption_key length

Definition at line 1226 of file ssl.h.

mbedtls_time_t mbedtls_ssl_session::private_start

start time of current session

Definition at line 1176 of file ssl.h.

unsigned char* mbedtls_ssl_session::private_ticket

RFC 5077 session ticket

Definition at line 1197 of file ssl.h.

uint32_t mbedtls_ssl_session::private_ticket_age_add

Randomly generated value used to obscure the age of the ticket

Definition at line 1224 of file ssl.h.

char* mbedtls_ssl_session::private_ticket_alpn

ALPN negotiated in the session during which the ticket was generated.

Definition at line 1234 of file ssl.h.

mbedtls_ms_time_t mbedtls_ssl_session::private_ticket_creation_time

When a ticket is created by a TLS server as part of an established TLS session, the ticket creation time may need to be saved for the ticket module to be able to check the ticket age when the ticket is used. That's the purpose of this field. Before creating a new ticket, an Mbed TLS server set this field with its current time in milliseconds. This time may then be saved in the session ticket data by the session ticket writing function and recovered by the ticket parsing function later when the ticket is used. The ticket module may then use this time to compute the ticket age and determine if it has expired or not. The Mbed TLS implementations of the session ticket writing and parsing functions save and retrieve the ticket creation time as part of the session ticket data. The session ticket parsing function relies on the mbedtls_ssl_session_get_ticket_creation_time() API to get the ticket creation time from the session ticket data.

Definition at line 1220 of file ssl.h.

uint8_t mbedtls_ssl_session::private_ticket_flags

Ticket flags

Definition at line 1225 of file ssl.h.

size_t mbedtls_ssl_session::private_ticket_len

session ticket length

Definition at line 1198 of file ssl.h.

uint32_t mbedtls_ssl_session::private_ticket_lifetime

ticket lifetime hint

Definition at line 1199 of file ssl.h.

mbedtls_ms_time_t mbedtls_ssl_session::private_ticket_reception_time

Time in milliseconds when the last ticket was received.

Definition at line 1240 of file ssl.h.

mbedtls_ssl_protocol_version mbedtls_ssl_session::private_tls_version

TLS version negotiated in the session. Used if and when renegotiating or resuming a session instead of the configured minor TLS version.

Definition at line 1173 of file ssl.h.

uint32_t mbedtls_ssl_session::private_verify_result

verification result

Definition at line 1194 of file ssl.h.

---

The documentation for this struct was generated from the following file:

• ssl.h