[openssl-users] Possible bug in 1.1.1-pre8 with NSTs and PSK in initial ClientHello handshake

[Henderson, Karl via openssl-users]

According to RFC8446, Section C.4 “Servers SHOULD issue new tickets with every 
connection”.

Yet, in file ssl/statem/extensions_srvr.c, method tls_parse_ctos_psk, 
s->ext.ticket_expected = 0, preventing the NST from being sent.

This appears to be a bug – or am I missing something?

Thanks,
Karl


-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users