[openssl/openssl] 9c4d2c: Reject TLS 1.3 early data when PSK ciphersuite dif...

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 9c4d2c7bff92e678b88a5964a11c7057925a0bbb
      https://github.com/openssl/openssl/commit/9c4d2c7bff92e678b88a5964a11c7057925a0bbb
  Author: Mounir IDRASSI <[email protected]>
  Date:   2026-08-05 (Wed, 05 Aug 2026)

  Changed paths:
    M CHANGES.md
    M ssl/statem/extensions_srvr.c
    M ssl/statem/statem_clnt.c
    M ssl/statem/statem_lib.c
    M ssl/statem/statem_local.h
    M ssl/statem/statem_srvr.c
    M ssl/t1_lib.c
    M test/sslapitest.c

  Log Message:
  -----------
  Reject TLS 1.3 early data when PSK ciphersuite differs

TLS 1.3 PSK resumption can use any ciphersuite with the same hash, but 0-RTT
acceptance requires the selected ciphersuite to match the one associated with
the selected PSK.

Keep same-hash PSK resumption working and reject only early data on a
ciphersuite mismatch. Document the user-visible fix in CHANGES.md.

Also updated RFC8446 references in ssl/*.[ch] code comments to corresponding
RFC9846 locations.

Fixes #31803

Reviewed-by: Bob Beck <[email protected]>
Reviewed-by: Norbert Pocs <[email protected]>
MergeDate: Wed Aug  5 08:16:57 2026
(Merged from https://github.com/openssl/openssl/pull/32032)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications

-- 
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/master/ba75c9-9c4d2c%40github.com.