]> git.ipfire.org Git - thirdparty/hostap.git/commitdiff
wolfssl: Verify that session ticket setup does not fail
authorJuliusz Sosinowicz <juliusz@wolfssl.com>
Thu, 4 Apr 2024 18:16:25 +0000 (20:16 +0200)
committerJouni Malinen <j@w1.fi>
Sun, 2 Feb 2025 17:26:05 +0000 (19:26 +0200)
Signed-off-by: Juliusz Sosinowicz <juliusz@wolfssl.com>
src/crypto/tls_wolfssl.c

index e1a264c122f95b3ac7713bd9f72870f53259ca73..f3589cfb3db62cfeb4bce8c8a4812b429e1fe7bc 100644 (file)
@@ -1911,8 +1911,12 @@ int tls_global_set_params(void *tls_ctx,
 
 #ifdef HAVE_SESSION_TICKET
        /* Session ticket is off by default - can't disable once on. */
-       if (!(params->flags & TLS_CONN_DISABLE_SESSION_TICKET))
-               wolfSSL_CTX_UseSessionTicket(tls_ctx);
+       if (!(params->flags & TLS_CONN_DISABLE_SESSION_TICKET) &&
+           wolfSSL_CTX_UseSessionTicket(tls_ctx) != WOLFSSL_SUCCESS) {
+               wpa_printf(MSG_ERROR,
+                          "wolfSSL: wolfSSL_CTX_UseSessionTicket failed");
+               return -1;
+       }
 #endif /* HAVE_SESSION_TICKET */
 
 #ifdef HAVE_OCSP