Skip to content
Commit e711da71 authored by Emilia Kasper's avatar Emilia Kasper
Browse files

RT2772: accept empty SessionTicket



RFC 5077 section 3.3 says:
If the server determines that it does not want to include a
ticket after it has included the SessionTicket extension in the
ServerHello, then it sends a zero-length ticket in the
NewSessionTicket handshake message.

Previously the client would fail upon attempting to allocate a
zero-length buffer. Now, we have the client ignore the empty ticket and
keep the existing session.

Reviewed-by: default avatarMatt Caswell <matt@openssl.org>
parent 51cbee35
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment