filter the tickets with tls13_kex_mode on client side.
Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
This commit is contained in:
parent
e6487fe3c2
commit
9356678047
1 changed files with 12 additions and 1 deletions
|
@ -672,11 +672,22 @@ static psa_algorithm_t ssl_tls13_get_ciphersuite_hash_alg(int ciphersuite)
|
||||||
}
|
}
|
||||||
|
|
||||||
#if defined(MBEDTLS_SSL_SESSION_TICKETS)
|
#if defined(MBEDTLS_SSL_SESSION_TICKETS)
|
||||||
|
static int ssl_tls13_has_compat_ticket_flags(mbedtls_ssl_context *ssl)
|
||||||
|
{
|
||||||
|
mbedtls_ssl_session *session = ssl->session_negotiate;
|
||||||
|
return session != NULL &&
|
||||||
|
mbedtls_ssl_conf_tls13_check_kex_modes(ssl,
|
||||||
|
mbedtls_ssl_tls13_session_get_ticket_flags(
|
||||||
|
session,
|
||||||
|
MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_ALL));
|
||||||
|
}
|
||||||
|
|
||||||
static int ssl_tls13_has_configured_ticket(mbedtls_ssl_context *ssl)
|
static int ssl_tls13_has_configured_ticket(mbedtls_ssl_context *ssl)
|
||||||
{
|
{
|
||||||
mbedtls_ssl_session *session = ssl->session_negotiate;
|
mbedtls_ssl_session *session = ssl->session_negotiate;
|
||||||
return ssl->handshake->resume &&
|
return ssl->handshake->resume &&
|
||||||
session != NULL && session->ticket != NULL;
|
session != NULL && session->ticket != NULL &&
|
||||||
|
ssl_tls13_has_compat_ticket_flags(ssl);
|
||||||
}
|
}
|
||||||
|
|
||||||
#if defined(MBEDTLS_SSL_EARLY_DATA)
|
#if defined(MBEDTLS_SSL_EARLY_DATA)
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue