diff --git a/src/tls.c b/src/tls.c index 2bc19532b..1f1bbc3fe 100644 --- a/src/tls.c +++ b/src/tls.c @@ -13781,7 +13781,7 @@ int TLSX_PopulateExtensions(WOLFSSL* ssl, byte isServer) word64 now, milli; #endif - if (sess->ticketLen > MAX_PSK_ID_LEN) { + if (isServer && (sess->ticketLen > MAX_PSK_ID_LEN)) { WOLFSSL_MSG("Session ticket length for PSK ext is too large"); return BUFFER_ERROR; }