[openssl/openssl] 104c60: Test a 0 return from the ticket key callback

Matt Caswell noreply at github.com
Tue Sep 27 13:03:29 UTC 2022


  Branch: refs/heads/openssl-3.0
  Home:   https://github.com/openssl/openssl
  Commit: 104c60e90016401c4319eb7c80363f742bc74643
      https://github.com/openssl/openssl/commit/104c60e90016401c4319eb7c80363f742bc74643
  Author: Matt Caswell <matt at openssl.org>
  Date:   2022-09-27 (Tue, 27 Sep 2022)

  Changed paths:
    M test/sslapitest.c

  Log Message:
  -----------
  Test a 0 return from the ticket key callback

A 0 return from a ticket key callback should indicate that crypto parameters
are not currently available and that the handshake should continue without
generating/using the ticket.

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Viktor Dukhovni <viktor at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/19249)


  Commit: 61f8d46d49eeee87d44cfa74acfb2f81393b92dd
      https://github.com/openssl/openssl/commit/61f8d46d49eeee87d44cfa74acfb2f81393b92dd
  Author: Matt Caswell <matt at openssl.org>
  Date:   2022-09-27 (Tue, 27 Sep 2022)

  Changed paths:
    M ssl/statem/statem.c
    M ssl/statem/statem_srvr.c

  Log Message:
  -----------
  If a ticket key callback returns 0 in TLSv1.3 don't send a ticket

If we can't construct the ticket don't send one. This requires a change
to the TLS state machine to be able to a handle a construction function
deciding not to send a message after all.

Fixes #18977

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Viktor Dukhovni <viktor at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/19249)


Compare: https://github.com/openssl/openssl/compare/a2c0a959e0bb...61f8d46d49ee


More information about the openssl-commits mailing list