Add test for export keys functionality
Add test in `ssl-opts.sh` that the export keys callback
is actually called.
diff --git a/programs/ssl/ssl_client2.c b/programs/ssl/ssl_client2.c
index a9bcd01..a33cfb5 100644
--- a/programs/ssl/ssl_client2.c
+++ b/programs/ssl/ssl_client2.c
@@ -482,14 +482,17 @@
eap_tls_keys *keys = (eap_tls_keys *)p_expkey;
( ( void ) kb );
- ( ( void ) maclen );
- ( ( void ) keylen );
- ( ( void ) ivlen );
memcpy( keys->master_secret, ms, sizeof( keys->master_secret ) );
memcpy( keys->randbytes, client_random, 32 );
memcpy( keys->randbytes + 32, server_random, 32 );
keys->tls_prf_type = tls_prf_type;
+ if( opt.debug_level > 2 )
+ {
+ mbedtls_printf("exported maclen is %zu\n",maclen);
+ mbedtls_printf("exported keylen is %zu\n",keylen);
+ mbedtls_printf("exported ivlen is %zu\n",ivlen);
+ }
return( 0 );
}
#endif