Commit b1a51abb authored by Tatsuhiro Tsujikawa's avatar Tatsuhiro Tsujikawa Committed by Matt Caswell
Browse files

Remove generation of exporter master secret on client application traffic 



Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
Reviewed-by: default avatarMatt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/4944)
parent 2221ec10

ssl/tls13_enc.c

+0 −10
Original line number Diff line number Diff line
@@ -562,16 +562,6 @@ int tls13_change_cipher_state(SSL *s, int which) 
            goto err;

        }

        s->session->master_key_length = hashlen;



        /* Now we create the exporter master secret */

        if (!tls13_hkdf_expand(s, ssl_handshake_md(s), insecret,

                               exporter_master_secret,

                               sizeof(exporter_master_secret) - 1,

                               hash, hashlen, s->exporter_master_secret,

                               hashlen)) {

            /* SSLfatal() already called */

            goto err;

        }

    }



    if (!derive_secret_key_and_iv(s, which & SSL3_CC_WRITE, md, cipher,