Add a special hook in credentials manager for the session ticket key,

with a default implementation that creates a new random key on the
first call.

1 files changed, 8 insertions, 0 deletions

diff --git a/src/credentials/credentials_manager.h b/src/credentials/credentials_manager.h
index 3994de6c6..7fcdcd6eb 100644
--- a/src/credentials/credentials_manager.h
+++ b/src/credentials/credentials_manager.h
@@ -48,6 +48,11 @@ class BOTAN_DLL Credentials_Manager
                                const std::string& identity);
 
       /**
+      * @return key used to encrypt session tickets by a TLS server
+      */
+      virtual const SymmetricKey& session_ticket_key();
+
+      /**
       * @return identifier for client-side SRP auth, if available
                 for this type/context. Should return empty string
                 if password auth not desired/available.
@@ -137,6 +142,9 @@ class BOTAN_DLL Credentials_Manager
       virtual Private_Key* private_key_for(const X509_Certificate& cert,
                                            const std::string& type,
                                            const std::string& context);
+
+   private:
+      SymmetricKey m_session_ticket_key;
    };
 
 }