Skip to content
Snippets Groups Projects
Commit 5416fdc2 authored by Daiki Ueno's avatar Daiki Ueno
Browse files

gnutls_session_is_resumed: don't check session ID in TLS 1.3


In middlebox compatibiltiy mode, TLS 1.3 client simulates the TLS 1.2
resumption handshake, so checking session ID for resumption is
pointless.  This worked previously because the client always generated
new random value even in a true resumption handshake, but didn't
update the session parameters properly.

Signed-off-by: Daiki Ueno's avatarDaiki Ueno <ueno@gnu.org>
parent f237cbd9
No related branches found
No related tags found
Loading
......@@ -981,9 +981,9 @@ int gnutls_session_is_resumed(gnutls_session_t session)
{
if (session->security_parameters.entity == GNUTLS_CLIENT) {
const version_entry_st *ver = get_version(session);
if (ver && ver->tls13_sem &&
session->internals.resumed)
return 1;
if (ver && ver->tls13_sem) {
return session->internals.resumed;
}
if (session->security_parameters.session_id_size > 0 &&
session->security_parameters.session_id_size ==
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment