]> git.ipfire.org Git - thirdparty/openssl.git/commit
Add a TLS version consistency check during session resumption
authorMatt Caswell <matt@openssl.org>
Thu, 3 Nov 2016 15:05:27 +0000 (15:05 +0000)
committerMatt Caswell <matt@openssl.org>
Wed, 16 Nov 2016 10:09:46 +0000 (10:09 +0000)
commitc87386a2cd586368a61d86ede03319f910d050f4
treeb6dc981173c7ff9b0f6aaa22309bd4ae442757f7
parentd7c42d71ba407a4b3c26ed58263ae225976bbac3
Add a TLS version consistency check during session resumption

This is a temporary fix for while we are still using the old session
resumption logic in the TLSv1.3 code. Due to differences in EXTMS support
we can't resume a <=TLSv1.2 session in a TLSv1.3 connection (the EXTMS
consistency check causes the connection to abort). This causes test
failures.

Ultimately we will rewrite the session resumption logic for TLSv1.3 so this
problem will go away. But until then we need a quick fix to keep the tests
happy.

Reviewed-by: Rich Salz <rsalz@openssl.org>
ssl/ssl_sess.c