From c7498365077e456ac762e4f7290f9225f0b2248c Mon Sep 17 00:00:00 2001
From: Razvan Cojocaru <razvan.cojocaru@openvpn.com>
Date: Mon, 18 Nov 2024 13:42:04 +0200
Subject: [PATCH] ProtoContext: Allow external clients to enable dynamic
 TLS-crypt

Signed-off-by: Razvan Cojocaru <razvan.cojocaru@openvpn.com>
---
 openvpn/ssl/proto.hpp | 13 +++++++++++--
 1 file changed, 11 insertions(+), 2 deletions(-)

diff --git a/openvpn/ssl/proto.hpp b/openvpn/ssl/proto.hpp
index 9fcf547ec..cb1129e03 100644
--- a/openvpn/ssl/proto.hpp
+++ b/openvpn/ssl/proto.hpp
@@ -665,6 +665,16 @@ class ProtoContext : public logging::LoggingMixin<OPENVPN_DEBUG_PROTO,
             load_common(opt, pco, server ? LOAD_COMMON_SERVER : LOAD_COMMON_CLIENT);
         }
 
+        /**
+         * Fire up the infrastructure needed in order to be able to process dynamic
+         * TLS-crypt renegotiation.
+         */
+        void enable_dynamic_tls_crypt()
+        {
+            set_tls_crypt_algs();
+            tls_crypt_ |= TLSCrypt::Dynamic;
+        }
+
         // load options string pushed by server
         void process_push(const OptionList &opt, const ProtoContextCompressionOptions &pco)
         {
@@ -823,8 +833,7 @@ class ProtoContext : public logging::LoggingMixin<OPENVPN_DEBUG_PROTO,
                         }
                         else if (flag == "dyn-tls-crypt")
                         {
-                            set_tls_crypt_algs();
-                            tls_crypt_ |= Dynamic;
+                            enable_dynamic_tls_crypt();
                         }
                         else if (flag == "tls-ekm")
                         {