mbedtls_ssl_session
ssl.h
unsigned char unsigned char mbedtls_ssl_session::private_mfl_code private_mfl_code mbedtls_ssl_session::private_mfl_code

MaxFragmentLength negotiated by peer

unsigned char unsigned char mbedtls_ssl_session::private_exported private_exported mbedtls_ssl_session::private_exported

< RecordSizeLimit received from the peer

uint8_t uint8_t mbedtls_ssl_session::private_endpoint private_endpoint mbedtls_ssl_session::private_endpoint

0: client, 1: server

mbedtls_ssl_protocol_version mbedtls_ssl_protocol_version mbedtls_ssl_session::private_tls_version private_tls_version mbedtls_ssl_session::private_tls_version

TLS version negotiated in the session. Used if and when renegotiating or resuming a session instead of the configured minor TLS version.

mbedtls_time_t mbedtls_time_t mbedtls_ssl_session::private_start private_start mbedtls_ssl_session::private_start

start time of current session

int int mbedtls_ssl_session::private_ciphersuite private_ciphersuite mbedtls_ssl_session::private_ciphersuite

chosen ciphersuite

size_t size_t mbedtls_ssl_session::private_id_len private_id_len mbedtls_ssl_session::private_id_len

session id length

unsigned char unsigned char mbedtls_ssl_session::private_id[32] [32] private_id mbedtls_ssl_session::private_id

session identifier

unsigned char unsigned char mbedtls_ssl_session::private_master[48] [48] private_master mbedtls_ssl_session::private_master

the master secret

mbedtls_x509_crt * mbedtls_x509_crt* mbedtls_ssl_session::private_peer_cert private_peer_cert mbedtls_ssl_session::private_peer_cert

peer X.509 cert chain

uint32_t uint32_t mbedtls_ssl_session::private_verify_result private_verify_result mbedtls_ssl_session::private_verify_result

verification result

unsigned char * unsigned char* mbedtls_ssl_session::private_ticket private_ticket mbedtls_ssl_session::private_ticket

RFC 5077 session ticket

size_t size_t mbedtls_ssl_session::private_ticket_len private_ticket_len mbedtls_ssl_session::private_ticket_len

session ticket length

uint32_t uint32_t mbedtls_ssl_session::private_ticket_lifetime private_ticket_lifetime mbedtls_ssl_session::private_ticket_lifetime

ticket lifetime hint

mbedtls_ms_time_t mbedtls_ms_time_t mbedtls_ssl_session::private_ticket_creation_time private_ticket_creation_time mbedtls_ssl_session::private_ticket_creation_time

When a ticket is created by a TLS server as part of an established TLS session, the ticket creation time may need to be saved for the ticket module to be able to check the ticket age when the ticket is used. That's the purpose of this field. Before creating a new ticket, an Mbed TLS server set this field with its current time in milliseconds. This time may then be saved in the session ticket data by the session ticket writing function and recovered by the ticket parsing function later when the ticket is used. The ticket module may then use this time to compute the ticket age and determine if it has expired or not. The Mbed TLS implementations of the session ticket writing and parsing functions save and retrieve the ticket creation time as part of the session ticket data. The session ticket parsing function relies on the mbedtls_ssl_session_get_ticket_creation_time() API to get the ticket creation time from the session ticket data.

uint32_t uint32_t mbedtls_ssl_session::private_ticket_age_add private_ticket_age_add mbedtls_ssl_session::private_ticket_age_add

Randomly generated value used to obscure the age of the ticket

uint8_t uint8_t mbedtls_ssl_session::private_ticket_flags private_ticket_flags mbedtls_ssl_session::private_ticket_flags

Ticket flags

uint8_t uint8_t mbedtls_ssl_session::private_resumption_key_len private_resumption_key_len mbedtls_ssl_session::private_resumption_key_len

resumption_key length

unsigned char unsigned char mbedtls_ssl_session::private_resumption_key[MBEDTLS_SSL_TLS1_3_TICKET_RESUMPTION_KEY_LEN] [MBEDTLS_SSL_TLS1_3_TICKET_RESUMPTION_KEY_LEN] private_resumption_key mbedtls_ssl_session::private_resumption_key
char * char* mbedtls_ssl_session::private_hostname private_hostname mbedtls_ssl_session::private_hostname

host name binded with tickets

mbedtls_ms_time_t mbedtls_ms_time_t mbedtls_ssl_session::private_ticket_reception_time private_ticket_reception_time mbedtls_ssl_session::private_ticket_reception_time

Time in milliseconds when the last ticket was received.

int int mbedtls_ssl_session::private_encrypt_then_mac private_encrypt_then_mac mbedtls_ssl_session::private_encrypt_then_mac

flag for EtM activation

mbedtls_ssl_tls13_application_secrets mbedtls_ssl_tls13_application_secrets mbedtls_ssl_session::private_app_secrets private_app_secrets mbedtls_ssl_session::private_app_secrets
mbedtls_asn1_buf
mbedtls_asn1_named_data
oid
val
next
mbedtls_asn1_sequence
buf
next
mbedtls_pk_context
mbedtls_ssl_session
private_peer_cert
private_app_secrets
mbedtls_ssl_tls13_application_secrets
mbedtls_x509_authority
authorityCertSerialNumber
keyIdentifier
raw
authorityCertIssuer
mbedtls_x509_crt
issuer_id
issuer_raw
pk_raw
private_sig
raw
serial
sig_oid
subject_id
subject_key_id
subject_raw
...
issuer
subject
valid_from
valid_to
pk
certificate_policies
ext_key_usage
subject_alt_names
authority_key_id
next
mbedtls_x509_time
- mbedtls_ssl_session
  private_app_secrets
- mbedtls_ssl_session
  private_ciphersuite
- mbedtls_ssl_session
  private_encrypt_then_mac
- mbedtls_ssl_session
  private_endpoint
- mbedtls_ssl_session
  private_exported
- mbedtls_ssl_session
  private_hostname
- mbedtls_ssl_session
  private_id
- mbedtls_ssl_session
  private_id_len
- mbedtls_ssl_session
  private_master
- mbedtls_ssl_session
  private_mfl_code
- mbedtls_ssl_session
  private_peer_cert
- mbedtls_ssl_session
  private_resumption_key
- mbedtls_ssl_session
  private_resumption_key_len
- mbedtls_ssl_session
  private_start
- mbedtls_ssl_session
  private_ticket
- mbedtls_ssl_session
  private_ticket_age_add
- mbedtls_ssl_session
  private_ticket_creation_time
- mbedtls_ssl_session
  private_ticket_flags
- mbedtls_ssl_session
  private_ticket_len
- mbedtls_ssl_session
  private_ticket_lifetime
- mbedtls_ssl_session
  private_ticket_reception_time
- mbedtls_ssl_session
  private_tls_version
- mbedtls_ssl_session
  private_verify_result