Skip to content
Commit 64ec4795 authored by Emilia Kasper's avatar Emilia Kasper
Browse files

RT2772: accept empty SessionTicket



RFC 5077 section 3.3 says: If the server determines that it does not
want to include a ticket after it has included the SessionTicket
extension in the ServerHello, then it sends a zero-length ticket in the
NewSessionTicket handshake message.

Previously the client would fail upon attempting to allocate a
zero-length buffer. Now, we have the client ignore the empty ticket and
keep the existing session.

Reviewed-by: default avatarMatt Caswell <matt@openssl.org>
(cherry picked from commit 21b538d6)
parent 7794c355
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment