From 36ff232cf2bf5dfcaf9e60a8c492439428a243bb Mon Sep 17 00:00:00 2001 From: Matt Caswell Date: Wed, 14 Mar 2018 19:22:48 +0000 Subject: Change the default number of NewSessionTickets we send to 2 Reviewed-by: Viktor Dukhovni Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/5227) --- ssl/ssl_lib.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) (limited to 'ssl/ssl_lib.c') diff --git a/ssl/ssl_lib.c b/ssl/ssl_lib.c index 2c29d7f61c..c38fc58a5d 100644 --- a/ssl/ssl_lib.c +++ b/ssl/ssl_lib.c @@ -591,6 +591,7 @@ int SSL_clear(SSL *s) s->psksession_id = NULL; s->psksession_id_len = 0; s->hello_retry_request = 0; + s->sent_tickets = 0; s->error = 0; s->hit = 0; @@ -3034,8 +3035,8 @@ SSL_CTX *SSL_CTX_new(const SSL_METHOD *meth) */ ret->max_early_data = 0; - /* By default we send one session ticket automatically in TLSv1.3 */ - ret->num_tickets = 1; + /* By default we send two session tickets automatically in TLSv1.3 */ + ret->num_tickets = 2; ssl_ctx_system_config(ret); -- cgit v1.2.3