forked from wolfSSL/wolfssl
TLS 1.3 PSK: fix for session ticket timeout
Return straightaway if the ticket is out of date. Need to fallback to full handshake.
This commit is contained in:
@@ -3369,7 +3369,8 @@ static int DoPreSharedKeys(WOLFSSL* ssl, const byte* input, word32 helloSz,
|
||||
diff - MAX_TICKET_AGE_SECS * 1000 > 1000) {
|
||||
/* Invalid difference, fallback to full handshake. */
|
||||
ssl->options.resuming = 0;
|
||||
break;
|
||||
/* Hash the rest of the ClientHello. */
|
||||
return HashRaw(ssl, input + helloSz - bindersLen, bindersLen);
|
||||
}
|
||||
|
||||
/* Check whether resumption is possible based on suites in SSL and
|
||||
|
Reference in New Issue
Block a user