Commit f05bcf0f authored by Matt Caswell's avatar Matt Caswell
Browse files

Never send a session id in TLS1.3 



Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2259)
parent e7a28df7

ssl/statem/statem_clnt.c

+1 −1
Original line number Diff line number Diff line
@@ -1003,7 +1003,7 @@ int tls_construct_client_hello(SSL *s, WPACKET *pkt) 
    }



    /* Session ID */

    if (s->new_session)

    if (s->new_session || s->session->ssl_version == TLS1_3_VERSION)

        sess_id_len = 0;

    else

        sess_id_len = s->session->session_id_length;