New tls channel id version for OpenSSL

openssl/ssl/ssl.h

Index: openssl/ssl/ssl.h
diff --git a/openssl/ssl/ssl.h b/openssl/ssl/ssl.h
index a3944f177dda9ae8f632a6e70bb8d93081355233..fe92ccf0845b9c623b98b6d63c086b667ffa9aac 100644
--- a/openssl/ssl/ssl.h
+++ b/openssl/ssl/ssl.h
@@ -547,6 +547,13 @@ struct ssl_session_st
 #ifndef OPENSSL_NO_SRP
 	char *srp_username;
 #endif
+
+	/* original_handshake_hash contains the handshake hash (either
+	 * SHA-1+MD5 or SHA-2, depending on TLS version) for the original, full
+	 * handshake that created a session. This is used by Channel IDs during
+	 * resumption. */
+	unsigned char original_handshake_hash[EVP_MAX_MD_SIZE];
+	unsigned int original_handshake_hash_len;

[wtc, 2014/04/30 14:11:50]

Do we need to initialize original_handshake_hash_len to 0 explicitly, or is the
entire ssl_session_st struct zeroed at5 creation time?

[haavardm, 2014/04/30 17:18:50]

memset(ss,0,sizeof(SSL_SESSION)) happens in SSL_SESSION_new()

 	};
 
 #endif