]> git.ipfire.org Git - thirdparty/openssl.git/commit
TLSv1.3: reissue session ticket after full handshake on ciphersuite mismatch
authorDaniel Kubec <kubec@openssl.org>
Mon, 30 Mar 2026 11:43:41 +0000 (13:43 +0200)
committerNorbert Pocs <norbertp@openssl.org>
Thu, 16 Apr 2026 11:27:41 +0000 (13:27 +0200)
commit6115286faeb8fb023d79660e973a3252b142f6c1
treeaac60766f6792a887927b9752149d542afc32209
parentf60c9d1448b11f486a45d569ed3ac682623d3b79
TLSv1.3: reissue session ticket after full handshake on ciphersuite mismatch

When session resumption falls back to a full handshake due to a ciphersuite
mismatch, ensure a new session ticket is issued with the newly negotiated
ciphersuite.

Fixes #18549

Reviewed-by: Tomas Mraz <tomas@openssl.foundation>
Reviewed-by: Matt Caswell <matt@openssl.foundation>
MergeDate: Thu Apr 16 11:27:51 2026
(Merged from https://github.com/openssl/openssl/pull/30626)
ssl/statem/extensions_srvr.c
test/build.info
test/recipes/70-test_tls13ticket.t [new file with mode: 0644]
test/tls13tickettest.c [new file with mode: 0644]