Early-return from TLS 1.2 resumption on SNI/ALPN mismatch

2026-07-05 17:10:49 +02:00 · 2026-06-01 16:15:43 -04:00
parent e7f491a98a
commit 492603fbd4
1 changed files with 2 additions and 0 deletions
@@ -38097,6 +38097,7 @@ static int AddPSKtoPreMasterSecret(WOLFSSL* ssl)
                            TICKET_BINDING_HASH_SZ) != 0) {
                WOLFSSL_MSG("Resumed session SNI mismatch, full handshake");
                ssl->options.resuming = 0;
+                return ret;
            }
 #endif
 #ifdef HAVE_ALPN
@@ -38106,6 +38107,7 @@ static int AddPSKtoPreMasterSecret(WOLFSSL* ssl)
                             TICKET_BINDING_HASH_SZ) != 0)) {
                WOLFSSL_MSG("Resumed session ALPN mismatch, full handshake");
                ssl->options.resuming = 0;
+                return ret;
            }
 #endif
        }