eden-emu/mbedtls
15
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

update document abourt maximum ticket_age_tolerance

Browse source 
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
This commit is contained in:
Jerry Yu 2022-09-13 11:14:42 +08:00
parent a02841bb8a
commit 6cf85a4bb0
1 changed files with 14 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

16
include/mbedtls/mbedtls_config.h
View file

@ -1550,9 +1550,21 @@
//#define MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE //#define MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
/** /**
* \def MBEDTLS_SSL_TLS1_3_TICKET_NONCE_LENGTH * \def MBEDTLS_SSL_TLS1_3_TICKET_AGE_TOLERANCE
* *
* Time in seconds of max ticket lifetime. This is not used in TLS 1.2. * Maximum time difference in milliseconds tolerated between the age of a
* ticket from the server and client point of view.
* From the client point of view, the age of a ticket is the time difference
* between the time when the client proposes to the server to use the ticket
* (time of writing of the Pre-Shared Key Extension including the ticket) and
* the time the client received the ticket from the server.
* From the server point of view, the age of a ticket is the time difference
* between the time when the server receives a proposition from the client
* to use the ticket and the time when the ticket was created by the server.
* The server age is expected to be always greater than the client one and
* MBEDTLS_SSL_TLS1_3_TICKET_AGE_TOLERANCE defines the
* maximum difference tolerated for the server to accept the ticket.
* This is not used in TLS 1.2.
* *
*/ */
#define MBEDTLS_SSL_TLS1_3_TICKET_AGE_TOLERANCE 6000 #define MBEDTLS_SSL_TLS1_3_TICKET_AGE_TOLERANCE 6000