RFR: 8277307: Pre shared key sent under both session_ticket and pre_shared_key extensions
Daniel Jeliński
djelinski at openjdk.java.net
Fri May 27 14:10:01 UTC 2022
Session ticket extension should only contain pre-TLS1.3 stateless session tickets; it should not be used for sending TLS1.3 pre-shared keys.
-------------
Commit messages:
- Send empty ticket when resuming TLS1.3
Changes: https://git.openjdk.java.net/jdk/pull/8922/files
Webrev: https://webrevs.openjdk.java.net/?repo=jdk&pr=8922&range=00
Issue: https://bugs.openjdk.java.net/browse/JDK-8277307
Stats: 21 lines in 2 files changed: 14 ins; 0 del; 7 mod
Patch: https://git.openjdk.java.net/jdk/pull/8922.diff
Fetch: git fetch https://git.openjdk.java.net/jdk pull/8922/head:pull/8922
PR: https://git.openjdk.java.net/jdk/pull/8922
More information about the security-dev
mailing list