Index: third_party/tlslite/patches/token_binding_resumption.patch |
diff --git a/third_party/tlslite/patches/token_binding_resumption.patch b/third_party/tlslite/patches/token_binding_resumption.patch |
new file mode 100644 |
index 0000000000000000000000000000000000000000..5d856b2a73c3f641b7ce5af39b8792830c68bc5c |
--- /dev/null |
+++ b/third_party/tlslite/patches/token_binding_resumption.patch |
@@ -0,0 +1,15 @@ |
+diff --git a/third_party/tlslite/tlslite/tlsconnection.py b/third_party/tlslite/tlslite/tlsconnection.py |
+index 6a53282..6e26fdd 100644 |
+--- a/third_party/tlslite/tlslite/tlsconnection.py |
++++ b/third_party/tlslite/tlslite/tlsconnection.py |
+@@ -1536,6 +1536,10 @@ class TLSConnection(TLSRecordLayer): |
+ serverHello.extended_master_secret = \ |
+ clientHello.extended_master_secret and \ |
+ settings.enableExtendedMasterSecret |
++ for param in clientHello.tb_client_params: |
++ if param in settings.supportedTokenBindingParams: |
++ serverHello.tb_params = param |
++ break |
+ for result in self._sendMsg(serverHello): |
+ yield result |
+ |