Add a special hook in credentials manager for the session ticket key,

with a default implementation that creates a new random key on the
first call.

2 files changed, 16 insertions, 0 deletions

diff --git a/src/credentials/credentials_manager.cpp b/src/credentials/credentials_manager.cpp
index ef5d44819..a70d8d660 100644
--- a/src/credentials/credentials_manager.cpp
+++ b/src/credentials/credentials_manager.cpp
@@ -7,6 +7,7 @@
 
 #include <botan/credentials_manager.h>
 #include <botan/x509stor.h>
+#include <botan/libstate.h>
 
 namespace Botan {
 
@@ -30,6 +31,13 @@ SymmetricKey Credentials_Manager::psk(const std::string&,
    throw Internal_Error("No PSK set for identity " + identity);
    }
 
+const SymmetricKey& Credentials_Manager::session_ticket_key()
+   {
+   if(m_session_ticket_key.length() == 0)
+      m_session_ticket_key = SymmetricKey(global_state().global_rng(), 32);
+   return m_session_ticket_key;
+   }
+
 std::string Credentials_Manager::srp_identifier(const std::string&,
                                                 const std::string&)
    {
diff --git a/src/credentials/credentials_manager.h b/src/credentials/credentials_manager.h
index 3994de6c6..7fcdcd6eb 100644
--- a/src/credentials/credentials_manager.h
+++ b/src/credentials/credentials_manager.h
@@ -48,6 +48,11 @@ class BOTAN_DLL Credentials_Manager
                                const std::string& identity);
 
       /**
+      * @return key used to encrypt session tickets by a TLS server
+      */
+      virtual const SymmetricKey& session_ticket_key();
+
+      /**
       * @return identifier for client-side SRP auth, if available
                 for this type/context. Should return empty string
                 if password auth not desired/available.
@@ -137,6 +142,9 @@ class BOTAN_DLL Credentials_Manager
       virtual Private_Key* private_key_for(const X509_Certificate& cert,
                                            const std::string& type,
                                            const std::string& context);
+
+   private:
+      SymmetricKey m_session_ticket_key;
    };
 
 }