From c7b969b5b438f66f75605ca35d24892f68c535a7 Mon Sep 17 00:00:00 2001 From: toddouska Date: Wed, 13 Jul 2016 18:45:10 -0700 Subject: [PATCH] don't echo session id on blank ticket if we're going to create a new ticket --- src/tls.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/tls.c b/src/tls.c index fc45041e1..6b69bcff7 100644 --- a/src/tls.c +++ b/src/tls.c @@ -3160,6 +3160,8 @@ static int TLSX_SessionTicket_Parse(WOLFSSL* ssl, byte* input, word16 length, TLSX_SetResponse(ssl, TLSX_SESSION_TICKET); /* send blank ticket */ ssl->options.createTicket = 1; /* will send ticket msg */ ssl->options.useTicket = 1; + ssl->options.resuming = 0; /* no standard resumption */ + ssl->arrays->sessionIDSz = 0; /* no echo on blank ticket */ } } else { /* got actual ticket from client */