RFR: 8277307: Pre shared key sent under both session_ticket and pre_shared_key extensions

Daniel Jeliński djelinski at openjdk.java.net
Fri May 27 14:10:01 UTC 2022


Session ticket extension should only contain pre-TLS1.3 stateless session tickets; it should not be used for sending TLS1.3 pre-shared keys.

-------------

Commit messages:
 - Send empty ticket when resuming TLS1.3

Changes: https://git.openjdk.java.net/jdk/pull/8922/files
 Webrev: https://webrevs.openjdk.java.net/?repo=jdk&pr=8922&range=00
  Issue: https://bugs.openjdk.java.net/browse/JDK-8277307
  Stats: 21 lines in 2 files changed: 14 ins; 0 del; 7 mod
  Patch: https://git.openjdk.java.net/jdk/pull/8922.diff
  Fetch: git fetch https://git.openjdk.java.net/jdk pull/8922/head:pull/8922

PR: https://git.openjdk.java.net/jdk/pull/8922



More information about the security-dev mailing list