diff options
| author | Emilia Kasper <emilia@openssl.org> | 2014-10-28 17:35:59 +0100 |
|---|---|---|
| committer | Emilia Kasper <emilia@openssl.org> | 2014-10-28 17:41:49 +0100 |
| commit | 9bdedec0cf37b923024377c0280a1c134e9c49c6 (patch) | |
| tree | 5e1faff75760eba97ab97943208b54f9a355e12b /crypto | |
| parent | f63fa8b10a08fcd344f08df16b43c19dadb17055 (diff) | |
Tighten session ticket handling
Tighten client-side session ticket handling during renegotiation:
ensure that the client only accepts a session ticket if the server sends
the extension anew in the ServerHello. Previously, a TLS client would
reuse the old extension state and thus accept a session ticket if one was
announced in the initial ServerHello.
Reviewed-by: Bodo Moeller <bodo@openssl.org>
(cherry picked from commit d663df2399d1d9d6015bcfd2ec87b925ea3558a2)
Conflicts:
CHANGES
Diffstat (limited to 'crypto')
0 files changed, 0 insertions, 0 deletions