[gnutls-devel] GnuTLS | add support for 0-RTT (!775)

[Development of GNU's TLS library]

Daiki Ueno commented on a discussion on lib/tls13/anti_replay.c:

> +			ret = gnutls_assert_val(GNUTLS_E_EARLY_DATA_REJECTED);
> +			goto out;
> +		}
> +	} else {
> +		gnutls_datum_t value;
> +
> +		value = db_retrieve_func(db_ptr, key);
> +		if (value.data) {
> +			/* We don't care about the data. */
> +			free(value.data);
> +			_gnutls_handshake_log("anti_replay: duplicate ClientHello found\n");
> +			ret = gnutls_assert_val(GNUTLS_E_EARLY_DATA_REJECTED);
> +			goto out;
> +		}
> +	}
> +

OK, I added `gnutls_db_add_func` and replaced the use of `gnutls_db_check_func` and `gnutls_db_store_func` in anti_replay.c with it.  Also removed the bloom filter stuff that would require periodical batch cleanup.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/merge_requests/775#note_114983869
You're receiving this email because of your account on gitlab.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20181106/fa23d1a8/attachment-0001.html>