feedc0de/wolfssl
1
0
Fork 0
forked from wolfSSL/wolfssl
Code Pull Requests Activity

TLS 1.3 PSK: fix for session ticket timeout

Browse Source 
Return straightaway if the ticket is out of date.
Need to fallback to full handshake.
This commit is contained in:
Sean Parkinson
2020-10-16 14:16:13 +10:00
parent 134e1be189
commit 07e69829d7
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
src/tls13.c
View File

@@ -3369,7 +3369,8 @@ static int DoPreSharedKeys(WOLFSSL* ssl, const byte* input, word32 helloSz,
diff - MAX_TICKET_AGE_SECS * 1000 > 1000) { diff - MAX_TICKET_AGE_SECS * 1000 > 1000) {
/* Invalid difference, fallback to full handshake. */ /* Invalid difference, fallback to full handshake. */
ssl->options.resuming = 0; ssl->options.resuming = 0;
break; /* Hash the rest of the ClientHello. */
return HashRaw(ssl, input + helloSz - bindersLen, bindersLen);
} }
/* Check whether resumption is possible based on suites in SSL and /* Check whether resumption is possible based on suites in SSL and