sysadmin/ipxe
1
0
Fork 0
mirror of https://github.com/ipxe/ipxe synced 2026-10-07 15:05:42 +03:00
Code Issues Packages Projects Releases Wiki Activity

[tls] Ignore TLS version 1.3 NewSessionTicket

Browse Source 
Session resumption in TLS version 1.3 is structurally different from
TLS version 1.2, and will not initially be supported.

Ignore any NewSessionTicket records for now, since they will otherwise
cause the connection to be aborted.

Signed-off-by: Michael Brown <mcb30@ipxe.org>
This commit is contained in:
Michael Brown
2026-09-14 22:34:44 +01:00
parent 78851666b3
commit ba64f5d2fb
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/net/tls.c
+7
View File
@@ -2844,6 +2844,13 @@ static int tls_new_session_ticket ( struct tls_connection *tls,
} __attribute__ (( packed )) *new_session_ticket = data;
size_t ticket_len;
/* Ignore as-yet unsupported session tickets */
if ( tls_version ( tls, TLS_VERSION_TLS_1_3 ) ) {
DBGC ( tls, "TLS %p ignoring unsupported New Session Ticket\n",
tls );
return 0;
}
/* Parse header */
if ( sizeof ( *new_session_ticket ) > len ) {
DBGC ( tls, "TLS %p received underlength New Session Ticket\n",