]> git.ipfire.org Git - thirdparty/openssl.git/commit
Validate that a PSK identity is at least one byte long
authorMatt Caswell <matt@openssl.foundation>
Fri, 1 May 2026 11:29:44 +0000 (12:29 +0100)
committerNorbert Pocs <norbertp@openssl.org>
Sun, 3 May 2026 13:46:14 +0000 (15:46 +0200)
commit399ac55fc7c3fda8cedda2bb47945d6d826b34e7
treed688230595c716637bba98f83a6ba49fe14f3213
parentc164a4c51ccba3a21c822e4ef3535fd74bc4806b
Validate that a PSK identity is at least one byte long

RFC8446 requires that a PSK identity is at least one byte in length. We
should validate this.

Fixes #31007

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Eugene Syromiatnikov <esyr@openssl.org>
Reviewed-by: Frederik Wedel-Heinen <fwh.openssl@gmail.com>
MergeDate: Sun May  3 13:46:21 2026
(Merged from https://github.com/openssl/openssl/pull/31058)
ssl/statem/extensions_srvr.c