Skip to content

TLS 1.3 session ticket: don't send ticket when no common KE modes

Daiki Ueno requested to merge tmp-session-ticket-incompatible into master

With the psk_key_exchange_modes extension, clients can restrict the key exchange modes for use with resumption. If there is no overlap between the advertised modes and the modes enabled in server side, the server shouldn't send NewSessionTicket.

Checklist

  • Test suite updated with functionality tests
  • Test suite updated with negative tests
  • Documentation updated

Reviewer's checklist:

  • Any issues marked for closing are addressed
  • There is a test suite reasonably covering new functionality or modifications
  • Function naming, parameters, return values, types, etc., are consistent and according to CONTRIBUTION.md
  • This feature/change has adequate documentation added
  • No obvious mistakes in the code
Edited by Nikos Mavrogiannopoulos

Merge request reports