]> git.ipfire.org Git - thirdparty/openssl.git/commit
Hardening around not_resumable sessions
authorMatt Caswell <matt@openssl.org>
Fri, 15 Mar 2024 17:58:42 +0000 (17:58 +0000)
committerTomas Mraz <tomas@openssl.org>
Mon, 8 Apr 2024 10:09:42 +0000 (12:09 +0200)
commitc342f4b8bd2d0b375b0e22337057c2eab47d9b96
tree69a1a573e2f3fe57f533dea4fbf70a8bf46576ec
parente32ad41b48c28d82339de064b05d5e269e5aed97
Hardening around not_resumable sessions

Make sure we can't inadvertently use a not_resumable session

Related to CVE-2024-2511

Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24044)
ssl/ssl_sess.c