gnutls_session_key_update(3)

gnutls_session_key_update3

Api function

Usage

#include <gnutls/gnutls.h>

int gnutls_session_key_update(gnutls_session_t session, unsigned flags);

Arguments

gnutls_session_t session

is a gnutls_session_t type.

unsigned flags

zero of GNUTLS_KU_PEER

Overview

This function will update/refresh the session keys when the TLS protocol is 1.3 or better. The peer is notified of the update by sending a message, so this function should be treated similarly to gnutls_record_send() --i.e., it may return GNUTLS_E_AGAIN or GNUTLS_E_INTERRUPTED.

When this flag GNUTLS_KU_PEER is specified, this function in addition to updating the local keys, will ask the peer to refresh its keys too.

If the negotiated version is not TLS 1.3 or better this function will return GNUTLS_E_INVALID_REQUEST.

Returns

GNUTLS_E_SUCCESS on success, otherwise a negative error code.

Since

3.6.3

Releases

5 releases since Debian 10 (Buster); the text changed 4 times.

  1. 10
  2. 11
  3. 12
  4. 13
  5. Arch

Reporting bugs

Report bugs to <[email protected]>.
Home page: https://www.gnutls.org

From gnutls 3.8.13-3 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.