| commit | de2c7504ebd4ec15334ae151a31917753468f86f | [log] [tgz] |
|---|---|---|
| author | Emilia Kasper <emilia@openssl.org> | Wed Nov 19 16:40:27 2014 +0100 |
| committer | Emilia Kasper <emilia@openssl.org> | Thu Nov 20 14:57:15 2014 +0100 |
| tree | 851523cb1d61f74403e9ef4394d92a069ac9032a | |
| parent | 980bc1ec6114f5511b20c2e6ca741e61a39b99d6 [diff] |
Always require an advertised NewSessionTicket message. The server must send a NewSessionTicket message if it advertised one in the ServerHello, so make a missing ticket message an alert in the client. An equivalent change was independently made in BoringSSL, see commit 6444287806d801b9a45baf1f6f02a0e3a16e144c. Reviewed-by: Matt Caswell <matt@openssl.org>