Merge pull request #8302 from cconlon/sessTickLenCheck

Loosen MAX_PSK_ID_LEN check in TLSX_PopulateExtensions() to only server side
This commit is contained in:
Sean Parkinson
2024-12-20 08:44:10 +10:00
committed by GitHub

View File

@ -13781,7 +13781,7 @@ int TLSX_PopulateExtensions(WOLFSSL* ssl, byte isServer)
word64 now, milli; word64 now, milli;
#endif #endif
if (sess->ticketLen > MAX_PSK_ID_LEN) { if (isServer && (sess->ticketLen > MAX_PSK_ID_LEN)) {
WOLFSSL_MSG("Session ticket length for PSK ext is too large"); WOLFSSL_MSG("Session ticket length for PSK ext is too large");
return BUFFER_ERROR; return BUFFER_ERROR;
} }