Possible bug in 1.1.1-pre8 with NSTs and PSK in initial ClientHello handshake

["Henderson, Karl via openssl-users" <openssl-users@xxxxxxxxxxx>]

According to RFC8446, Section C.4 “Servers SHOULD issue new tickets with every connection”.

 

Yet, in file ssl/statem/extensions_srvr.c, method tls_parse_ctos_psk, s->ext.ticket_expected = 0, preventing the NST from being sent.

 

This appears to be a bug – or am I missing something?

 

Thanks,

Karl

 

-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users