hannestschofenig / mbedtls

An open source, portable, easy to use, readable and flexible SSL library
https://tls.mbed.org
Apache License 2.0
16 stars 8 forks source link

Callback style API for new session ticket for TLS 1.3 #370

Open lhuang04 opened 3 years ago

lhuang04 commented 3 years ago

Suggested enhancement

Should we consider the callback style API to report a new session ticket is received by the client?

Justification

OpenSSL uses SSL_CTX_sess_set_new_cb to report a new session ticket. In mbedtls TLS 1.3, we report it via return code, MBEDTLS_ERR_SSL_RECEIVED_NEW_SESSION_TICKET. There are couple of limitations in current approach.

zhihan commented 3 years ago

A related discussion in upstream: https://github.com/ARMmbed/mbedtls/issues/2917