diff options
| -rw-r--r-- | lib/vquic/ngtcp2.c | 36 | ||||
| -rw-r--r-- | lib/vquic/ngtcp2.h | 3 |
2 files changed, 36 insertions, 3 deletions
diff --git a/lib/vquic/ngtcp2.c b/lib/vquic/ngtcp2.c index 86151b8a2..b97c0c3d4 100644 --- a/lib/vquic/ngtcp2.c +++ b/lib/vquic/ngtcp2.c @@ -174,8 +174,19 @@ static int quic_set_encryption_secrets(SSL *ssl, tx_secret, secretlen, NGTCP2_CRYPTO_SIDE_CLIENT) != 0) return 0; - if(level == NGTCP2_CRYPTO_LEVEL_APP && init_ngh3_conn(qs) != CURLE_OK) - return 0; + if(level == NGTCP2_CRYPTO_LEVEL_APP) { + if(init_ngh3_conn(qs) != CURLE_OK) + return 0; + + /* malloc an area big enough for both secrets */ + qs->rx_secret = malloc(secretlen * 2); + if(!qs->rx_secret) + return 0; + memcpy(qs->rx_secret, rx_secret, secretlen); + memcpy(&qs->rx_secret[secretlen], tx_secret, secretlen); + qs->tx_secret = &qs->rx_secret[secretlen]; + qs->rx_secretlen = secretlen; + } return 1; } @@ -503,6 +514,25 @@ static int cb_get_new_connection_id(ngtcp2_conn *tconn, ngtcp2_cid *cid, return 0; } +static int cb_update_key(ngtcp2_conn *tconn, uint8_t *rx_key, + uint8_t *rx_iv, uint8_t *tx_key, + uint8_t *tx_iv, void *user_data) +{ + struct quicsocket *qs = (struct quicsocket *)user_data; + uint8_t rx_secret[64]; + uint8_t tx_secret[64]; + + if(ngtcp2_crypto_update_key(tconn, rx_secret, tx_secret, + rx_key, rx_iv, tx_key, tx_iv, qs->rx_secret, + qs->tx_secret, qs->rx_secretlen) != 0) + return NGTCP2_ERR_CALLBACK_FAILURE; + + /* store the updated secrets */ + memcpy(qs->rx_secret, rx_secret, qs->rx_secretlen); + memcpy(qs->tx_secret, tx_secret, qs->rx_secretlen); + return 0; +} + static ngtcp2_conn_callbacks ng_callbacks = { cb_initial, NULL, /* recv_client_initial */ @@ -524,7 +554,7 @@ static ngtcp2_conn_callbacks ng_callbacks = { NULL, /* rand */ cb_get_new_connection_id, NULL, /* remove_connection_id */ - NULL, /* update_key */ + cb_update_key, /* update_key */ NULL, /* path_validation */ NULL, /* select_preferred_addr */ cb_stream_reset, diff --git a/lib/vquic/ngtcp2.h b/lib/vquic/ngtcp2.h index 5570fc7e7..62eae4895 100644 --- a/lib/vquic/ngtcp2.h +++ b/lib/vquic/ngtcp2.h @@ -46,6 +46,9 @@ struct quicsocket { ngtcp2_settings settings; SSL_CTX *sslctx; SSL *ssl; + uint8_t *rx_secret; /* malloced */ + uint8_t *tx_secret; /* points into the above buffer */ + size_t rx_secretlen; struct quic_handshake client_crypto_data[3]; /* the last TLS alert description generated by the local endpoint */ uint8_t tls_alert; |