[openssl/openssl] 21c92a: Enforce RFC 8446 ticket lifetime limit for TLS 1.3...
"'Abel Thomas' via openssl-commits" <[email protected]>
| Newsgroups | gmane.comp.encryption.openssl.cvs |
|---|---|
| Message-ID | <openssl/openssl/push/refs/heads/openssl-4.0/[email protected]> |
Branch: refs/heads/openssl-4.0
Home: https://github.com/openssl/openssl
Commit: 21c92ae589affca6de843a272ba7bb76359efb3e
https://github.com/openssl/openssl/commit/21c92ae589affca6de843a272ba7bb76359efb3e
Author: Abel Tom <[email protected]>
Date: 2026-06-18 (Thu, 18 Jun 2026)
Changed paths:
M CHANGES.md
M ssl/statem/statem_clnt.c
Log Message:
-----------
Enforce RFC 8446 ticket lifetime limit for TLS 1.3 client
Add client-side validation to check if session ticket lifetime
hints exceeds 7 days in TLS1.3 connections and caps it to the
maximum value of 7 days(604800 seconds).
Modified `CHANGES.md` with the description of updated change.
Resolves: #30808
Reviewed-by: Eugene Syromiatnikov <[email protected]>
Reviewed-by: Tomas Mraz <[email protected]>
MergeDate: Thu Jun 18 12:25:33 2026
(Merged from https://github.com/openssl/openssl/pull/31174)
(cherry picked from commit 5a85e4152d817749400b0e30ebbbcce738fbfbb5)
To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications
--
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/openssl-4.0/9f777e-21c92a%40github.com.