]> git.ipfire.org Git - thirdparty/openssl.git/commit
Hardening around not_resumable sessions
authorMatt Caswell <matt@openssl.org>
Fri, 15 Mar 2024 17:58:42 +0000 (17:58 +0000)
committerTomas Mraz <tomas@openssl.org>
Mon, 8 Apr 2024 10:06:25 +0000 (12:06 +0200)
commit21df7f04f6c4a560b4de56d10e1e58958c7e566d
treed145109a73bf824bdba11c95860d2adf0bb969af
parent03c4b0eab6dcbb59e3f58baad634be8fc798c103
Hardening around not_resumable sessions

Make sure we can't inadvertently use a not_resumable session

Related to CVE-2024-2511

Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24042)
ssl/ssl_sess.c