Commit 5f26ddff authored by Matt Caswell's avatar Matt Caswell
Browse files

Always issue new tickets when using TLSv1.3 stateful tickets 



Previously we were failing to issue new tickets if a resumption attempt
failed.

Fixes #6654

Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6722)
parent 04d7814a

ssl/statem/extensions_srvr.c

+2 −1
Original line number Original line Diff line number Diff line
@@ -1014,6 +1014,8 @@ static SSL_TICKET_STATUS tls_get_stateful_ticket(SSL *s, PACKET *tick, 
{

{

    SSL_SESSION *tmpsess = NULL;

    SSL_SESSION *tmpsess = NULL;





    s->ext.ticket_expected = 1;



    switch (PACKET_remaining(tick)) {

    switch (PACKET_remaining(tick)) {

        case 0:

        case 0:

            return SSL_TICKET_EMPTY;

            return SSL_TICKET_EMPTY;
@@ -1031,7 +1033,6 @@ static SSL_TICKET_STATUS tls_get_stateful_ticket(SSL *s, PACKET *tick, 
    if (tmpsess == NULL)

    if (tmpsess == NULL)

        return SSL_TICKET_NO_DECRYPT;

        return SSL_TICKET_NO_DECRYPT;





    s->ext.ticket_expected = 1;

    *sess = tmpsess;

    *sess = tmpsess;

    return SSL_TICKET_SUCCESS;

    return SSL_TICKET_SUCCESS;

}

}