commit 1f2bc6238b1074a4d0efcabea582a3ec369b3536
author Paul Bakker <p.j.bakker@polarssl.org> Thu Aug 15 13:45:55 2013 +0200
committer Paul Bakker <p.j.bakker@polarssl.org> Thu Aug 15 13:45:55 2013 +0200
tree 7c2f42f6db12cadcb3885d3e95667eee56e5781d
parent 05decb24c3a97867edb92dd3d7108730e0cbf698

Made support for the truncated_hmac extension configurable

library/ssl_srv.c

diff --git a/library/ssl_srv.c b/library/ssl_srv.c
index ff0e9d1..2b6f06f 100644
--- a/library/ssl_srv.c
+++ b/library/ssl_srv.c
@@ -581,6 +581,7 @@
 }
 #endif /* POLARSSL_SSL_MAX_FRAGMENT_LENGTH */
 
+#if defined(POLARSSL_SSL_TRUNCATED_HMAC)
 static int ssl_parse_truncated_hmac_ext( ssl_context *ssl,
                                          const unsigned char *buf,
                                          size_t len )
@@ -597,6 +598,7 @@
 
     return( 0 );
 }
+#endif /* POLARSSL_SSL_TRUNCATED_HMAC */
 
 #if defined(POLARSSL_SSL_SESSION_TICKETS)
 static int ssl_parse_session_ticket_ext( ssl_context *ssl,
@@ -1186,6 +1188,7 @@
             break;
 #endif /* POLARSSL_SSL_MAX_FRAGMENT_LENGTH */
 
+#if defined(POLARSSL_SSL_TRUNCATED_HMAC)
         case TLS_EXT_TRUNCATED_HMAC:
             SSL_DEBUG_MSG( 3, ( "found truncated hmac extension" ) );
 
@@ -1193,6 +1196,7 @@
             if( ret != 0 )
                 return( ret );
             break;
+#endif /* POLARSSL_SSL_TRUNCATED_HMAC */
 
 #if defined(POLARSSL_SSL_SESSION_TICKETS)
         case TLS_EXT_SESSION_TICKET:
@@ -1313,6 +1317,7 @@
     return( 0 );
 }
 
+#if defined(POLARSSL_SSL_TRUNCATED_HMAC)
 static void ssl_write_truncated_hmac_ext( ssl_context *ssl,
                                           unsigned char *buf,
                                           size_t *olen )
@@ -1335,6 +1340,7 @@
 
     *olen = 4;
 }
+#endif /* POLARSSL_SSL_TRUNCATED_HMAC */
 
 #if defined(POLARSSL_SSL_SESSION_TICKETS)
 static void ssl_write_session_ticket_ext( ssl_context *ssl,
@@ -1562,8 +1568,10 @@
     ext_len += olen;
 #endif
 
+#if defined(POLARSSL_SSL_TRUNCATED_HMAC)
     ssl_write_truncated_hmac_ext( ssl, p + 2 + ext_len, &olen );
     ext_len += olen;
+#endif
 
 #if defined(POLARSSL_SSL_SESSION_TICKETS)
     ssl_write_session_ticket_ext( ssl, p + 2 + ext_len, &olen );