commit 21548638b748aa84ebd6ee3cdbbd06a442076cc7
author Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> Thu May 16 11:39:42 2019 +0200
committer Jarno Lamsa <jarno.lamsa@arm.com> Fri Aug 23 12:48:41 2019 +0300
tree da8abae153ddb0e83930d084997ce1730cb106c4
parent 35eb80210328c2776e1600804b13dd4e2961a292

Save session in serialised form in ssl_client2.

This provides basic testing for the session (de)serialisation functions, as
well as an example of how to use them.

Tested locally with tests/ssl-opt.sh -f '^Session resume'.

programs/ssl/ssl_client2.c

diff --git a/programs/ssl/ssl_client2.c b/programs/ssl/ssl_client2.c
index 7ba4565..342ecdd 100644
--- a/programs/ssl/ssl_client2.c
+++ b/programs/ssl/ssl_client2.c
@@ -1047,6 +1047,8 @@
     mbedtls_ssl_context ssl;
     mbedtls_ssl_config conf;
     mbedtls_ssl_session saved_session;
+    unsigned char session_data[MBEDTLS_SSL_MAX_CONTENT_LEN];
+    size_t session_data_len;
 #if defined(MBEDTLS_TIMING_C)
     mbedtls_timing_delay_context timer;
 #endif
@@ -2447,6 +2449,19 @@
             goto exit;
         }
 
+        if( ( ret = mbedtls_ssl_session_save( &saved_session,
+                                              session_data, sizeof( session_data ),
+                                              &session_data_len ) ) != 0 )
+        {
+            mbedtls_printf( " failed\n  ! mbedtls_ssl_session_saved returned -0x%04x\n\n",
+                            -ret );
+            goto exit;
+        }
+
+        /* Simulate that serialised state can have a larger lifetime than a
+         * structure: keep the serialised data but not the structure. */
+        mbedtls_ssl_session_free( &saved_session );
+
         mbedtls_printf( " ok\n" );
     }
 
@@ -2886,10 +2901,19 @@
             goto exit;
         }
 
+        if( ( ret = mbedtls_ssl_session_load( &saved_session,
+                                              session_data,
+                                              session_data_len ) ) != 0 )
+        {
+            mbedtls_printf( " failed\n  ! mbedtls_ssl_session_load returned -0x%x\n\n",
+                            -ret );
+            goto exit;
+        }
+
         if( ( ret = mbedtls_ssl_set_session( &ssl, &saved_session ) ) != 0 )
         {
-            mbedtls_printf( " failed\n  ! mbedtls_ssl_conf_session returned %d\n\n",
-                            ret );
+            mbedtls_printf( " failed\n  ! mbedtls_ssl_set_session returned -0x%x\n\n",
+                            -ret );
             goto exit;
         }