[openssl/openssl] 6a7fec: PSK: Fix ALPN handling

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 6a7fec3fe5052b2db441afd699e2610e610392f9
      https://github.com/openssl/openssl/commit/6a7fec3fe5052b2db441afd699e2610e610392f9
  Author: Daniel Kubec <[email protected]>
  Date:   2026-08-27 (Thu, 27 Aug 2026)

  Changed paths:
    M CHANGES.md
    M ssl/statem/statem_clnt.c
    M ssl/statem/statem_srvr.c
    M test/tls13tickettest.c

  Log Message:
  -----------
  PSK: Fix ALPN handling

Prevent acceptance of 0-RTT data when the negotiated ALPN protocol differs from
the one associated with the session used for early data, and complete an
abbreviated handshake without processing early data.

Clear stale ALPN in client-side session on ticket receipt,
tls_process_new_session_ticket() (client) never updated
s->session->ext.alpn_selected when installing a new ticket, so a
session that had negotiated ALPN on an earlier connection kept
reporting that protocol even after a later resumption negotiated a
different one, or none at all.

Assisted-by: Claude:claude-opus-4-8

Fixes #11197

Reviewed-by: Neil Horman <[email protected]>
Reviewed-by: Tomas Mraz <[email protected]>
Reviewed-by: Viktor Dukhovni <[email protected]>
MergeDate: Thu Aug 27 08:34:15 2026
(Merged from https://github.com/openssl/openssl/pull/32401)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications

-- 
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/master/3ad285-6a7fec%40github.com.