[openssl/openssl] 3b7a32: Test a 0 return from the ticket key callback
    Matt Caswell 
    noreply at github.com
       
    Tue Sep 20 07:19:45 UTC 2022
    
    
  
  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 3b7a3241c225b152ba8519f540bcac5b680312c2
      https://github.com/openssl/openssl/commit/3b7a3241c225b152ba8519f540bcac5b680312c2
  Author: Matt Caswell <matt at openssl.org>
  Date:   2022-09-20 (Tue, 20 Sep 2022)
  Changed paths:
    M test/sslapitest.c
  Log Message:
  -----------
  Test a 0 return from the ticket key callback
A 0 return from a ticket key callback should indicate that crypto parameters
are not currently available and that the handshake should continue without
generating/using the ticket.
Reviewed-by: Viktor Dukhovni <viktor at openssl.org>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/18990)
  Commit: 3e93c5fe1eab677500448e18e4274b26e4b246ae
      https://github.com/openssl/openssl/commit/3e93c5fe1eab677500448e18e4274b26e4b246ae
  Author: Matt Caswell <matt at openssl.org>
  Date:   2022-09-20 (Tue, 20 Sep 2022)
  Changed paths:
    M ssl/statem/statem.c
    M ssl/statem/statem_srvr.c
  Log Message:
  -----------
  If a ticket key callback returns 0 in TLSv1.3 don't send a ticket
If we can't construct the ticket don't send one. This requires a change
to the TLS state machine to be able to a handle a construction function
deciding not to send a message after all.
Fixes #18977
Reviewed-by: Viktor Dukhovni <viktor at openssl.org>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/18990)
  Commit: 67ec6d2b747810db609330003dcf08c8c584105b
      https://github.com/openssl/openssl/commit/67ec6d2b747810db609330003dcf08c8c584105b
  Author: Matt Caswell <matt at openssl.org>
  Date:   2022-09-20 (Tue, 20 Sep 2022)
  Changed paths:
    M ssl/statem/statem.c
    M ssl/statem/statem.h
    M ssl/statem/statem_clnt.c
    M ssl/statem/statem_dtls.c
    M ssl/statem/statem_lib.c
    M ssl/statem/statem_local.h
    M ssl/statem/statem_srvr.c
  Log Message:
  -----------
  Use an enum for the return value from a construction function
Construction return values are no longer boolean but can return 3 different
values, so we use an enum to represent them.
Reviewed-by: Viktor Dukhovni <viktor at openssl.org>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/18990)
Compare: https://github.com/openssl/openssl/compare/9b25f52a4425...67ec6d2b7478
    
    
More information about the openssl-commits
mailing list