WICED SDK是否支持TLS会话票证扩展？

顺便说一下，WSDICSDK支持TLS会话标识符缓存吗？
我没有发现任何医生提到这个。



     以下为原文
  BTW, Does wiced sdk support TLS Session Identifier caching?
I don't find any doc mention this.

在MabtLS/CONFIG.H中检查此注释：
*使用TLS的会话恢复功能，应用程序只需要启用WieDeTLSLcliclia CaseEXsession会话标志
*担心存储连接信息。BESL库负责存储连接信息（IP、端口、会话信息）
*并恢复连接。要存储的条目的数量由WICEDIZTLSYclipCaseEnEngress宏决定。
*/
在wiced_tls。C、功能mbedtls_ssl_get_session（&；tls_context - >；语境，&；tls_session）是用来保存会话恢复后，mbedtls_ssl_set_session（&；tls_context - >；的背景下，tls_context - >；会话）是用来恢复会议。你可以检查会话恢复实施wiced_tls C.



     以下为原文
  Check this comment in mbedtls/config.h:
 
/* To use the session resumption feature of TLS, apps just need to enable WICED_TLS_CLI_CACHE_SESSION flag without
* worrying about storing connection info. BESL library takes care of storing the connection info(ip, port, session info)
* and resuming the connections. Number of entries to be stored is determined by WICED_TLS_CLI_CACHE_ENTRIES macro.
*/
 
In wiced_tls.c, the function mbedtls_ssl_get_session( &tls_context->context, &tls_session) is used to save session to resume later and mbedtls_ssl_set_session( &tls_context->context, tls_context->session ) is used to resume session. You can check session resumption implementation in wiced_tls.c.

1。我不清楚你的评论。
WICEDIZTLSSKLYCCAESEA会话是否意味着支持“TLS会话标识符缓存”？
如何支持“TLS会话机票扩展”？
2。定义FreeRTOS的编译错误
编制申请书
WICES/安全/ BESL/HOST/WICED/WICEDEGTL.C:113:5:错误：未知类型名称“UNT”
输入端口；
^
WICES/安全/ BESL/HOST/WICED/WICEDEGTL.C:157:68：错误：未知类型名称“UNT”
WiDeDeReultTyt GETSysLyCaseEnEnter（WieDeIpIppAddiSs*t*IPX地址，UntIt端口，WICDEDS-SLSYCaseEnEng***条目）
^
WICES/安全/ BESL/HOST/WICED/WICEDEGTL.C:180:68：错误：未知类型名称“UNT”
WiDeDeReultTytAdjsSLC.CaseEX条目（WieDeIpIpAddisSt*IPIP地址，Unt端口，MbEdtLSyssLyStult*TLSSY会话）
^
WICED/安全/ BESL/主机/ WICED/WICEDEGTLS.C：在函数“WICDEDGNICICICSTARTIOL TLSSY与密码”：
WICES/Sturnal/BESL/HOST/WICED/WICEDEGTL.C:120 4:13:警告：函数的隐式声明“GETOSSLSLCaseEnEnter”[WimPulfFuffic声明]
EngySyStase= GETOSLSLCCACHEIX条目（（WICEDIDIPIADESSRESTH*T*）和；Socket & GT；Sock.NxOTCPIOSockKEngultIntTip IP，Socket & GoT；
^
WICES/安全/ BESL/主机/ WICED/WICEDETTL.C:120 4:83:错误：请求成员'NXXTCP-SOCKET-CONTICONTHIP IP '在某个非结构或联盟的东西中
EngySyStase= GETOSLSLCCACHEIX条目（（WICEDIDIPIADESSRESTH*T*）和；Socket & GT；Sock.NxOTCPIOSockKEngultIntTip IP，Socket & GoT；
^
WICES/安全/ BESL/主机/ WICED/WICEDETTL.C:120 4:124:错误：请求成员'NXXTCPoSoCKEL连接器''端口在某个非结构或联盟的东西中
EngySyStase= GETOSLSLCCACHEIX条目（（WICEDIDIPIADESSRESTH*T*）和；Socket & GT；Sock.NxOTCPIOSockKEngultIntTip IP，Socket & GoT；
^
WICES/Sturnal/BESL/HOST/WICED/WICEDETTL.C:1393:21:警告：隐式声明函数“AddiaSLC.CaseEnEnter”[WimPulfFuffic声明]
AddixSlcCaseEnEnter（（WieDeIpIpAddiSrs*t*）& Socket & Gt；Sock.NxOTCPPoCocket连接程序IP，Socket & GoT；
^
WICES/安全/ BESL/主机/ WICED/WICEDETTL.C:1393:79:错误：请求成员'NxOTCPPoSoCixCelpTypip '在某个非结构或联盟的东西中的请求
AddixSlcCaseEnEnter（（WieDeIpIpAddiSrs*t*）& Socket & Gt；Sock.NxOTCPPoCocket连接程序IP，Socket & GoT；
^
WICES/安全/ BESL/主机/ WICED/WICEDETTL.C:1393:120：错误：请求成员“NxOTCPPoSoCKILL连接”在某个非结构或联盟的东西中
AddixSlcCaseEnEnter（（WieDeIpIpAddiSrs*t*）& Socket & Gt；Sock.NxOTCPPoCocket连接程序IP，Socket & GoT；
^
WICES/安全/ BESL/主机/ WICED/WICEDETTL.C:1408:83:错误：请求成员'NXXTCP-SOCKET-CONTICONTHIP IP '在某个非结构或联盟的东西中
AddixSlcCaseEnEnter（（WieDeIpIpAddiSrs*t*）& Socket & Gt；Sock.NxOTCPPoCocket连接程序IP，Socket & GoT；
^
WICES/安全/ BESL/主机/ WICED/WICEDETTL.C:1408:124:错误：请求成员'NXXTCPoSoCKEL连接器''端口在某个非结构或联盟的东西中
AddixSlcCaseEnEnter（（WieDeIpIpAddiSrs*t*）& Socket & Gt；Sock.NxOTCPPoCocket连接程序IP，Socket & GoT；
^
WICES/安全/ BESL/主机/ WICED/WICEDEGTL.C：在最高层：
WICES/安全/ BESL/HOST/WICED/WICEDEGTL.C:139:21:警告：“CopRealIpIpPalt”定义但未使用[-WunUnFuffe函数]
静态WiDeDeBooLyCopRealIppIt端口（LIKEDIListListNoDeTyt*NoDyToToMeX，VaultUsRyDATA）
^
制作[ 1 ]：*/[构建/SNIP.HTPSP- clier-FielsTo-LWIP-BCM9433WWCD2/模块//WICES/安全/ BESL/主机/ WICED/WICEDETH.TL.O]错误1
使[ 1 ]：***等待未完成的工作…
使：***[MNIONAPP]错误2



     以下为原文
  1. It's not clear to me about your comment.
   Does WICED_TLS_CLI_CACHE_SESSION means to support "TLS Session Identifier caching"?
   How about support for "TLS Session Ticket Extension"?
 
2. #define WICED_TLS_CLI_CACHE_SESSION causes compile error for FreeRTOS build
 
Compiling Supplicant_BESL
WICED/security/BESL/host/WICED/wiced_tls.c:113:5: error: unknown type name 'UINT'
     UINT                    port_num;
     ^
WICED/security/BESL/host/WICED/wiced_tls.c:157:68: error: unknown type name 'UINT'
wiced_result_t get_ssl_cache_entry(wiced_ip_address_t *ip_address, UINT port, wiced_ssl_cache_entry **entry)
                                                                    ^
WICED/security/BESL/host/WICED/wiced_tls.c:180:68: error: unknown type name 'UINT'
wiced_result_t add_ssl_cache_entry(wiced_ip_address_t *ip_address, UINT port, mbedtls_ssl_session *tls_session)
                                                                    ^
WICED/security/BESL/host/WICED/wiced_tls.c: In function 'wiced_generic_start_tls_with_ciphers':
WICED/security/BESL/host/WICED/wiced_tls.c:1204:13: warning: implicit declaration of function 'get_ssl_cache_entry' [-Wimplicit-function-declaration]
             entry_found = get_ssl_cache_entry((wiced_ip_address_t*)&socket->socket.nx_tcp_socket_connect_ip, socket->socket.nx_tcp_socket_connect_port, &cache_entry);
             ^
WICED/security/BESL/host/WICED/wiced_tls.c:1204:83: error: request for member 'nx_tcp_socket_connect_ip' in something not a structure or union
             entry_found = get_ssl_cache_entry((wiced_ip_address_t*)&socket->socket.nx_tcp_socket_connect_ip, socket->socket.nx_tcp_socket_connect_port, &cache_entry);
                                                                                   ^
WICED/security/BESL/host/WICED/wiced_tls.c:1204:124: error: request for member 'nx_tcp_socket_connect_port' in something not a structure or union
             entry_found = get_ssl_cache_entry((wiced_ip_address_t*)&socket->socket.nx_tcp_socket_connect_ip, socket->socket.nx_tcp_socket_connect_port, &cache_entry);
                                                                                                                            ^
WICED/security/BESL/host/WICED/wiced_tls.c:1393:21: warning: implicit declaration of function 'add_ssl_cache_entry' [-Wimplicit-function-declaration]
                     add_ssl_cache_entry( (wiced_ip_address_t*) &socket->socket.nx_tcp_socket_connect_ip, socket->socket.nx_tcp_socket_connect_port, &tls_session);
                     ^
WICED/security/BESL/host/WICED/wiced_tls.c:1393:79: error: request for member 'nx_tcp_socket_connect_ip' in something not a structure or union
                     add_ssl_cache_entry( (wiced_ip_address_t*) &socket->socket.nx_tcp_socket_connect_ip, socket->socket.nx_tcp_socket_connect_port, &tls_session);
                                                                               ^
WICED/security/BESL/host/WICED/wiced_tls.c:1393:120: error: request for member 'nx_tcp_socket_connect_port' in something not a structure or union
                     add_ssl_cache_entry( (wiced_ip_address_t*) &socket->socket.nx_tcp_socket_connect_ip, socket->socket.nx_tcp_socket_connect_port, &tls_session);
                                                                                                                        ^
WICED/security/BESL/host/WICED/wiced_tls.c:1408:83: error: request for member 'nx_tcp_socket_connect_ip' in something not a structure or union
                         add_ssl_cache_entry( (wiced_ip_address_t*) &socket->socket.nx_tcp_socket_connect_ip, socket->socket.nx_tcp_socket_connect_port, &tls_session);
                                                                                   ^
WICED/security/BESL/host/WICED/wiced_tls.c:1408:124: error: request for member 'nx_tcp_socket_connect_port' in something not a structure or union
                         add_ssl_cache_entry( (wiced_ip_address_t*) &socket->socket.nx_tcp_socket_connect_ip, socket->socket.nx_tcp_socket_connect_port, &tls_session);
                                                                                                                            ^
WICED/security/BESL/host/WICED/wiced_tls.c: At top level:
WICED/security/BESL/host/WICED/wiced_tls.c:139:21: warning: 'compare_ip_port' defined but not used [-Wunused-function]
static wiced_bool_t compare_ip_port( linked_list_node_t* node_to_compare, void* user_data )
                     ^
make[1]: *** [build/snip.https_client-FreeRTOS-LwIP-BCM94343WWCD2/Modules/./WICED/security/BESL/host/WICED/wiced_tls.o] Error 1
make[1]: *** Waiting for unfinished jobs....
make: *** [main_app] Error 2

1。对。启用WieDeTlsSlClcliaCaseEx会话将调用AddiSlsClaseCeEX条目（（WICEDIDIPIADESSRESTH*T*）和Socket & GT；Sock.NxOTCPIOSockyClultTypIP，Socket & Gt；Sock.NxOTCPIOSockKyEngultTyPoT，和TLSSession），这将缓存包括会话标识符在内的整个结构MbEdTLS-SSLSession。函数GETSysLyCaseEngEnter（）将检索指向TLS会话结构的缓存条目。在MBETTLS中支持TLS会话票扩展。在客户端Hello（SSLCli.c）中，函数sLulWrdEnScript StCKETXEXE（）被使用。您可以启用宏MbTysLSyssLsScript。
2。编译错误是因为NETX启用了这个特性。



     以下为原文
  1. Yes. Enabling WICED_TLS_CLI_CACHE_SESSION would call add_ssl_cache_entry( (wiced_ip_address_t*) &socket->socket.nx_tcp_socket_connect_ip, socket->socket.nx_tcp_socket_connect_port, &tls_session) and this would cache the entire structure mbedtls_ssl_session including session identifier. The function get_ssl_cache_entry() would retrieve the cache entry pointing to the TLS session structure. TLS Session ticket extension is supported in mbedTLS. The function ssl_write_session_ticket_ext() is used for the same during client hello (ssl_cli.c). You can enable the macro MBEDTLS_SSL_SESSION_TICKETS for this.
 
2. The compile error is caused because this feature has been enabled for NetX.

GRSR写道：
2。编译错误是因为NETX启用了这个特性。
实际上，WICED/安全/ BESL/主机/ WICED/WICEDEGTLS.C的实现
不应包括任何低级别的网络栈依赖结构。
不管怎样，我只是指出了这个问题，这样你就可以在下一个版本中修复构建问题。
谢谢。



     以下为原文
  

grsr wrote:
 
2. The compile error is caused because this feature has been enabled for NetX.

Actually, the implementation of WICED/security/BESL/host/WICED/wiced_tls.c
should not include any low level network stack dependent structure.
Anyway, I just point out the problem so you can fix the build problem in next release.
Thanks.

GRSR写道：
在MBETTLS中支持TLS会话票扩展。在客户端Hello（SSLCli.c）中，函数sLulWrdEnScript StCKETXEXE（）被使用。您可以启用宏MbTysLSyssLsScript。
我想订票是行不通的。
参见下面的构建警告：
WICED/安全/ BESL/主机/ WICED/WICEDEGTLS.C：在函数“WICDEDGNICICICSTARTIOL TLSSY与密码”：
WICES/Sturnal/BESL/HOST/WICEDI/TIL.C:1124:5:警告：从“不兼容指针类型”传递“MabtLsS*SLLBuffiSeScript票”的参数1
MabtLsSsSLIQueSuthSurvivs门票（＆CONF，OptTyCopy.Cube）；
^
在文件中包括.//WICES/Sturnal/BESL/HOST/WICES/TLSSH类型：H:50:0，
从/ /包含/ WICEDEGTLS。H：35，
从WICES/安全/ BESL/主机/ WICED/WICEDEGTLS。C：38：
//WICES/Sturial/BESL/MBODLDSSOPEN/OPEN/MBODSTLS/SSL.H:2181:6:Note：预期'StultMeBtLsS.SLLCONFIG*'，但参数类型为“StuttMeBtLsS.SLLSCONFIG**”
空MbTysLS.SLLBuffiSeScript票（MabtLsSsSLICOFIG*CONF，INTINESUX票）；
^
WESE使用MeBTTLS的方式太复杂了，正如我在其他线程中指出的那样。
只是一个建议，当你需要在MabLTS中改变原型时，你应该
想想为什么地球上只有这样的原型需要改变。
另外，如果您可以最小化MPETTLS中的更改，升级到较新的MbEDTLS版本将更容易。



     以下为原文
  

grsr wrote:
TLS Session ticket extension is supported in mbedTLS. The function ssl_write_session_ticket_ext() is used for the same during client hello (ssl_cli.c). You can enable the macro MBEDTLS_SSL_SESSION_TICKETS for this.
 

I think define MBEDTLS_SSL_SESSION_TICKETS won't work.
see below build warnings:
WICED/security/BESL/host/WICED/wiced_tls.c: In function 'wiced_generic_start_tls_with_ciphers':
WICED/security/BESL/host/WICED/wiced_tls.c:1124:5: warning: passing argument 1 of 'mbedtls_ssl_conf_session_tickets' from incompatible pointer type
     mbedtls_ssl_conf_session_tickets( &conf, opt_config.tickets );
     ^
In file included from ././WICED/security/BESL/host/WICED/tls_types.h:50:0,
                 from ./include/wiced_tls.h:35,
                 from WICED/security/BESL/host/WICED/wiced_tls.c:38:
./WICED/security/BESL/mbedtls_open/include/mbedtls/ssl.h:2181:6: note: expected 'struct mbedtls_ssl_config *' but argument is of type 'struct mbedtls_ssl_config **'
void mbedtls_ssl_conf_session_tickets( mbedtls_ssl_config *conf, int use_tickets );
      ^
 
PS. The way WICED uses mbedTLS is too hacky as I have pointed out in other thread.
Just a suggestion, when you need to change prototype in mbedLTS, you should probably
think over why on the earth only WICED needs such prototype change.
In additional, if you can minimize the changes in mbedTLS, it will be much easier to upgrade to newer mbedTLS version.

我在这个问题上与工程师进行了检查，以下是反馈：
1。我们将研究会话标识符缓存中的网络堆栈依赖性问题。谢谢你的反馈。
2。Westice中不支持MabtLsSsSLsScript。



     以下为原文
  I checked with the engineers on this issue and here is the feedback:
 
1. We will look into the network stack dependencies issue in session identifier caching. Thank you for the feedback.
2. MBEDTLS_SSL_SESSION_TICKETS is not supported in WICED.

GRSR写道：
我在这个问题上与工程师进行了检查，以下是反馈：
1。我们将研究会话标识符缓存中的网络堆栈依赖性问题。谢谢你的反馈。
在SDK-62中仍然存在相同的构建错误，如果y*定义了具有FieleTOS构建的WiEdjTLScliclia CaseEx会话。



     以下为原文
  

grsr wrote:
 
I checked with the engineers on this issue and here is the feedback:
 
1. We will look into the network stack dependencies issue in session identifier caching. Thank you for the feedback.

Still the same build error in sdk-6.2 if #define WICED_TLS_CLI_CACHE_SESSION with freertos build.