Commit ded4a83d authored by Matt Caswell's avatar Matt Caswell
Browse files

Ignore the status_request extension in a resumption handshake 



We cannot provide a certificate status on a resumption so we should
ignore this extension in that case.

Fixes #1662

Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
Reviewed-by: default avatarBen Kaduk <kaduk@mit.edu>
(Merged from https://github.com/openssl/openssl/pull/5896)
parent a12de2cb

ssl/statem/extensions_srvr.c

+4 −0
Original line number Diff line number Diff line
@@ -324,6 +324,10 @@ int tls_parse_ctos_status_request(SSL *s, PACKET *pkt, unsigned int context, 
{

    PACKET responder_id_list, exts;



    /* We ignore this in a resumption handshake */

    if (s->hit)

        return 1;



    /* Not defined if we get one of these in a client Certificate */

    if (x != NULL)

        return 1;