aboutsummaryrefslogtreecommitdiffstats
path: root/src/lib/tls
diff options
context:
space:
mode:
authorJack Lloyd <[email protected]>2019-05-28 00:59:05 -0400
committerJack Lloyd <[email protected]>2019-05-28 00:59:05 -0400
commitad39fed8b61653b763e781e2ec32c10565bde956 (patch)
treee6af988c441f1aaae5997d629ecfbf1a39fa9896 /src/lib/tls
parent0dd03c973f6c9ae6a38118385c82e64154e465f3 (diff)
Ask for certificate status even on a resumption attempt
This makes sense to do since if the server doesn't resume, we would like to see a updated status message.
Diffstat (limited to 'src/lib/tls')
-rw-r--r--src/lib/tls/msg_client_hello.cpp3
1 files changed, 3 insertions, 0 deletions
diff --git a/src/lib/tls/msg_client_hello.cpp b/src/lib/tls/msg_client_hello.cpp
index f83df44f1..a3e1206df 100644
--- a/src/lib/tls/msg_client_hello.cpp
+++ b/src/lib/tls/msg_client_hello.cpp
@@ -186,6 +186,9 @@ Client_Hello::Client_Hello(Handshake_IO& io,
m_extensions.add(new Server_Name_Indicator(session.server_info().hostname()));
m_extensions.add(new Session_Ticket(session.session_ticket()));
+ if(policy.support_cert_status_message())
+ m_extensions.add(new Certificate_Status_Request({}, {}));
+
std::unique_ptr<Supported_Groups> supported_groups(new Supported_Groups(policy.key_exchange_groups()));
if(supported_groups->ec_groups().size() > 0)