From 4cb004573a28fe5f8f8d95dc9407e0fe9df6f14c Mon Sep 17 00:00:00 2001 From: Matt Caswell Date: Tue, 26 Jun 2018 18:07:56 +0100 Subject: Remove TLSv1.3 tickets from the client cache as we use them Tickets are supposed to be single use so we remove them from the cache on use. Fixes #6377 Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/6601) --- ssl/statem/statem_clnt.c | 1 + 1 file changed, 1 insertion(+) (limited to 'ssl/statem/statem_clnt.c') diff --git a/ssl/statem/statem_clnt.c b/ssl/statem/statem_clnt.c index 26be9cb6b8..88c343761f 100644 --- a/ssl/statem/statem_clnt.c +++ b/ssl/statem/statem_clnt.c @@ -2682,6 +2682,7 @@ MSG_PROCESS_RETURN tls_process_new_session_ticket(SSL *s, PACKET *pkt) goto err; } s->session->session_id_length = sess_len; + s->session->not_resumable = 0; /* This is a standalone message in TLSv1.3, so there is no more to read */ if (SSL_IS_TLS13(s)) { -- cgit v1.2.3